, {}, {}, {r5}, {0x0, r7}, {}, {}, {r5, r7}, {r6}, {}, {0x0, r7}, {r6, r7}, {0x0, r7}, {r5}, {}, {0x0, r7}, {r6}, {}, {}, {r6}, {0x0, r7}, {}, {0x0, r7}, {}, {0x0, r7}, {0x0, r7}, {r5}, {}, {r6}, {r5}, {}, {r6, r7}, {}, {r3, r7}, {0x0, r7}, {}, {}, {r6}, {0x0, r7}, {0x0, r7}, {0x0, r7}, {r6}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {0x0, r7}, {r5}, {0x0, r7}, {}, {}, {r5, r7}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {r6}, {}, {0x0, r7}, {r5}, {r6, r7}, {0x0, r7}, {0x0, r7}, {}, {}, {}, {r5}, {0x0, r7}, {}, {0x0, r7}, {0x0, r7}, {0x0, r7}, {r6, r7}, {r5, r7}, {r6}, {}, {r5, r7}, {r5}, {0x0, r7}, {}, {r5}, {}, {}, {}, {0x0, r7}, {0x0, r7}, {0x0, r7}, {0x0, r7}, {}, {}, {r5, r7}, {0x0, r7}, {r6, r7}, {r5, r7}, {0x0, r7}, {}, {}, {r6}, {}, {}, {0x0, r7}, {r5}, {}, {r6}, {}, {}, {r6}, {0x0, r7}, {0x0, r7}, {}, {0x0, r7}, {}, {0x0, r7}, {}, {r5}, {}, {}, {}, {0x0, r7}, {r5, r7}, {r6}, {}, {}, {}, {r6}, {}, {}, {}, {r5}, {r5}, {}, {r5}, {r6}, {0x0, r7}, {r5}, {}, {r5}, {0x0, r7}, {r6}, {r5, r7}, {0x0, r7}, {}, {0x0, r7}, {}, {}, {0x0, r7}, {r6}, {}, {}, {r5}, {}, {0x0, r7}, {r6, r7}, {0x0, r7}, {0x0, r7}, {}, {}, {0x0, r7}, {r5}, {r6}, {r6, r7}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {r6}, {0x0, r7}, {}, {r6}, {r6}, {0x0, r4}, {}, {}, {0x0, r7}, {}, {r5, r7}, {r5}, {}, {}, {0x0, r7}, {}, {r6, r7}, {r5}, {0x0, r7}, {}, {}, {r5, r7}, {r6, r7}, {r6}, {r5, r7}, {}, {}, {r6}, {r5, r7}, {0x0, r7}, {}, {0x0, r7}, {r6}, {r6}, {r5}, {}, {r6, r7}, {r6}, {0x0, r7}, {}, {}, {}, {r5, r7}], 0x1, "2156816c73038c"}) r8 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r8, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:33:40 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x8, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{0x0, r6}, {}, {r5}, {r5}, {r5}, {}, {}, {0x0, r6}, {}, {0x0, r1}, {}, {}, {r4, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {r5}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r4}, {}, {0x0, r6}, {r5}, {}, {}, {r5}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {r5, r6}, {}, {r2, r6}, {0x0, r6}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {r5}, {}, {0x0, r6}, {r4}, {r5, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5, r6}, {r4, r6}, {r5}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {}, {}, {r5}, {}, {}, {0x0, r6}, {r4}, {}, {r5}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {r5}, {}, {}, {}, {r4}, {r4}, {}, {r4}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {}, {}, {r4}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r4}, {r5}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {r5}, {r5}, {0x0, r3}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {r4}, {}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {r4, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {r5}, {r4}, {}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {}, {r4, r6}], 0x1, "2156816c73038c"}) r7 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 441.715221][T29035] loop5: detected capacity change from 0 to 264192 [ 441.731350][T29039] loop0: detected capacity change from 0 to 264192 [ 441.751579][ C1] sd 0:0:1:0: tag#462 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 441.761348][ C1] sd 0:0:1:0: tag#462 CDB: opcode=0xe5 (vendor) [ 441.767870][ C1] sd 0:0:1:0: tag#462 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 441.776862][ C1] sd 0:0:1:0: tag#462 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 441.785910][ C1] sd 0:0:1:0: tag#462 CDB[20]: ba 14:33:40 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r5, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r8}, {}, {r7}, {r7}, {r7}, {}, {}, {0x0, r8}, {}, {0x0, r1}, {}, {}, {r6, r8}, {0x0, r8}, {}, {r7, r8}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {}, {0x0, r8}, {}, {}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {r7}, {}, {0x0, r8}, {r7, r8}, {0x0, r8}, {r6}, {}, {0x0, r8}, {r7}, {}, {}, {r7}, {0x0, r8}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {r6}, {}, {r7}, {r6}, {}, {r7, r8}, {}, {r2, r8}, {0x0, r8}, {}, {}, {r7}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {r7}, {}, {0x0, r8}, {r6}, {r7, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {r6}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7, r8}, {r6, r8}, {r7}, {}, {r6, r8}, {r6}, {0x0, r8}, {}, {r6}, {}, {}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {r6, r8}, {0x0, r8}, {r7, r8}, {r6, r8}, {0x0, r8}, {}, {}, {r7}, {}, {}, {0x0, r8}, {r6}, {}, {r7}, {}, {}, {r7}, {0x0, r8}, {0x0, r8}, {}, {0x0, r8}, {}, {0x0, r8}, {}, {r6}, {}, {}, {}, {0x0, r8}, {r6, r8}, {r7}, {}, {}, {}, {r7}, {}, {}, {}, {r6}, {r6}, {}, {r6}, {r7}, {0x0, r8}, {r6}, {}, {r6}, {0x0, r8}, {r7}, {r6, r8}, {0x0, r8}, {}, {0x0, r8}, {}, {}, {0x0, r8}, {r7}, {}, {}, {r6}, {}, {0x0, r8}, {r7, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {0x0, r8}, {r6}, {r7}, {r7, r8}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {r7}, {0x0, r8}, {}, {r7}, {r7}, {0x0, r3}, {}, {}, {0x0, r8}, {}, {r6, r8}, {r6}, {}, {}, {0x0, r8}, {}, {r7, r8}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {r7, r8}, {r7}, {r6, r8}, {}, {}, {r7}, {r6, r8}, {0x0, r8}, {}, {0x0, r8}, {r7}, {r7}, {r6}, {}, {r7, r8}, {r7}, {0x0, r8}, {}, {}, {}, {r6, r8}], 0x1, "2156816c73038c"}) r9 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r9, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 441.982966][T29052] loop4: detected capacity change from 0 to 264192 [ 442.045732][T29061] loop3: detected capacity change from 0 to 264192 [ 442.094342][ C0] sd 0:0:1:0: tag#463 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 442.104139][ C0] sd 0:0:1:0: tag#463 CDB: opcode=0xe5 (vendor) [ 442.110413][ C0] sd 0:0:1:0: tag#463 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 442.119374][ C0] sd 0:0:1:0: tag#463 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 442.128316][ C0] sd 0:0:1:0: tag#463 CDB[20]: ba 14:33:40 executing program 2: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r6, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r9}, {}, {r8}, {r8}, {r8}, {}, {}, {0x0, r9}, {}, {0x0, r2}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r8, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {r8}, {}, {0x0, r9}, {r8, r9}, {0x0, r9}, {r7}, {}, {0x0, r9}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {r7}, {}, {r8}, {r7}, {}, {r8, r9}, {}, {r3, r9}, {0x0, r9}, {}, {}, {r8}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {0x0, r9}, {r7}, {r8, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8, r9}, {r7, r9}, {r8}, {}, {r7}, {r7}, {}, {}, {r7}, {}, {}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r7, r9}, {}, {}, {}, {r8}, {}, {}, {}, {r7}, {}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {r7}, {}, {}, {}, {0x0, r9}, {r7, r9}, {r8}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {r7}, {r8}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {r8}, {r7, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {0x0, r9}, {r8}, {}, {}, {r7}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {r8}, {r8, r9}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {r8}, {0x0, r9}, {}, {r8}, {r8}, {0x0, r4}, {}, {}, {}, {}, {0x0, r9}, {r7}, {}, {}, {0x0, r9}, {}, {r8, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {r7, r9}, {}, {}, {r8}, {r7}, {0x0, r9}, {}, {0x0, r9}, {r8}, {r8}, {r7}, {}, {0x0, r9}, {r8}], 0x1, "2156816c73038c"}) r10 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r10, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:33:40 executing program 5: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r6, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r9}, {}, {r8}, {r8}, {r8}, {}, {}, {0x0, r9}, {}, {0x0, r2}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r8, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {r8}, {}, {0x0, r9}, {r8, r9}, {0x0, r9}, {r7}, {}, {0x0, r9}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {r7}, {}, {r8}, {r7}, {}, {r8, r9}, {}, {r3, r9}, {0x0, r9}, {}, {}, {r8}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {0x0, r9}, {r7}, {r8, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8, r9}, {r7, r9}, {r8}, {}, {r7}, {r7}, {}, {}, {r7}, {}, {}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r7, r9}, {}, {}, {}, {r8}, {}, {}, {}, {r7}, {}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {r7}, {}, {}, {}, {0x0, r9}, {r7, r9}, {r8}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {r7}, {r8}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {r8}, {r7, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {0x0, r9}, {r8}, {}, {}, {r7}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {r8}, {r8, r9}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {r8}, {0x0, r9}, {}, {r8}, {r8}, {0x0, r4}, {}, {}, {}, {}, {0x0, r9}, {r7}, {}, {}, {0x0, r9}, {}, {r8, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {r7, r9}, {}, {}, {r8}, {r7}, {0x0, r9}, {}, {0x0, r9}, {r8}, {r8}, {r7}, {}, {0x0, r9}, {r8}], 0x1, "2156816c73038c"}) r10 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r10, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 442.339617][T29069] loop2: detected capacity change from 0 to 264192 [ 442.395721][T29078] loop5: detected capacity change from 0 to 264192 [ 442.401137][ C0] sd 0:0:1:0: tag#464 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 442.411985][ C0] sd 0:0:1:0: tag#464 CDB: opcode=0xe5 (vendor) [ 442.418247][ C0] sd 0:0:1:0: tag#464 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 442.427214][ C0] sd 0:0:1:0: tag#464 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 442.436266][ C0] sd 0:0:1:0: tag#464 CDB[20]: ba [ 442.460755][ C1] sd 0:0:1:0: tag#465 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 442.470837][ C1] sd 0:0:1:0: tag#465 CDB: opcode=0xe5 (vendor) [ 442.477086][ C1] sd 0:0:1:0: tag#465 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 442.486147][ C1] sd 0:0:1:0: tag#465 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 442.495223][ C1] sd 0:0:1:0: tag#465 CDB[20]: ba 14:33:41 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x8, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{0x0, r6}, {}, {r5}, {r5}, {r5}, {}, {}, {0x0, r6}, {}, {0x0, r1}, {}, {}, {r4, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {r5}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r4}, {}, {0x0, r6}, {r5}, {}, {}, {r5}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {r5, r6}, {}, {r2, r6}, {0x0, r6}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {r5}, {}, {0x0, r6}, {r4}, {r5, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5, r6}, {r4, r6}, {r5}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {}, {}, {r5}, {}, {}, {0x0, r6}, {r4}, {}, {r5}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {r5}, {}, {}, {}, {r4}, {r4}, {}, {r4}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {}, {}, {r4}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r4}, {r5}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {r5}, {r5}, {0x0, r3}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {r4}, {}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {r4, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {r5}, {r4}, {}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {}, {r4, r6}], 0x1, "2156816c73038c"}) r7 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:33:41 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r5, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r8}, {}, {r7}, {r7}, {r7}, {}, {}, {0x0, r8}, {}, {0x0, r1}, {}, {}, {r6, r8}, {0x0, r8}, {}, {r7, r8}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {}, {0x0, r8}, {}, {}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {r7}, {}, {0x0, r8}, {r7, r8}, {0x0, r8}, {r6}, {}, {0x0, r8}, {r7}, {}, {}, {r7}, {0x0, r8}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {r6}, {}, {r7}, {r6}, {}, {r7, r8}, {}, {r2, r8}, {0x0, r8}, {}, {}, {r7}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {r7}, {}, {0x0, r8}, {r6}, {r7, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {r6}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7, r8}, {r6, r8}, {r7}, {}, {r6, r8}, {r6}, {0x0, r8}, {}, {r6}, {}, {}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {r6, r8}, {0x0, r8}, {r7, r8}, {r6, r8}, {0x0, r8}, {}, {}, {r7}, {}, {}, {0x0, r8}, {r6}, {}, {r7}, {}, {}, {r7}, {0x0, r8}, {0x0, r8}, {}, {0x0, r8}, {}, {0x0, r8}, {}, {r6}, {}, {}, {}, {0x0, r8}, {r6, r8}, {r7}, {}, {}, {}, {r7}, {}, {}, {}, {r6}, {r6}, {}, {r6}, {r7}, {0x0, r8}, {r6}, {}, {r6}, {0x0, r8}, {r7}, {r6, r8}, {0x0, r8}, {}, {0x0, r8}, {}, {}, {0x0, r8}, {r7}, {}, {}, {r6}, {}, {0x0, r8}, {r7, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {0x0, r8}, {r6}, {r7}, {r7, r8}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {r7}, {0x0, r8}, {}, {r7}, {r7}, {0x0, r3}, {}, {}, {0x0, r8}, {}, {r6, r8}, {r6}, {}, {}, {0x0, r8}, {}, {r7, r8}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {r7, r8}, {r7}, {r6, r8}, {}, {}, {r7}, {r6, r8}, {0x0, r8}, {}, {0x0, r8}, {r7}, {r7}, {r6}, {}, {r7, r8}, {r7}, {0x0, r8}, {}, {}, {}, {r6, r8}], 0x1, "2156816c73038c"}) r9 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r9, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:33:41 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="ac3b3dc1740cf1b4de69679d70b6915c3ed1e704f7ddb9f7781d877d431f9645dc809f90a4aa333ca199c315cfc66a9e69b944ad96603bc94c2124b77b8716ad4a0be6244cb987030662fe07e9137785d300b1635ee748f725f92695f4316f7be4e28e75e16b81e66725c675a19b08ef075d7fd1ccea98684c41431b82eeec6aa68979c8c22041042c5cb57d82280ba678781a691d9a", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000880080001000000000008000200010000001c000480050003000000000005001000000000000500030000000000"], 0x44}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="68010000", @ANYRES16=r1, @ANYBLOB="010025bd7000fedbdf25010000005001088024000780000006004e00000008000500e327ec0e0800050073e1051008000500bb42a81e1400078008000500a5d8c379080005004b5503431c0007800800060060000000080005007f1b991508000500a8974e662c000780080006000000000008000600e2000000080006008100000008000600a400000008000600900000001c00078099ff0b009d0000000800060050000000080006002900000044000780080006000300000008000500f67be10a0800060030000000080006002300000008000600ea00000008000600eb00000008000500f8004b0508000500c816ee200c00078008000600750000002c00078008000500a3219122080005009e4df721080005001ccc4e7108000500e209e01b08000600d60000003400078008000600ce00000008000500a0ce9c260800050049a8ca3808000600dc00000008000500c700df1f08000500838bc57b04000880"], 0x168}, 0x1, 0x0, 0x0, 0x9}, 0x4000000) set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) timerfd_create(0x9, 0x0) r3 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) timerfd_settime(r3, 0x1, &(0x7f0000000180)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f00000001c0)) chdir(&(0x7f0000000100)='./file1\x00') chdir(&(0x7f0000000000)='./file1\x00') r4 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r4, 0x1000) lseek(r4, 0x0, 0x2) set_mempolicy(0x8000, &(0x7f0000000240)=0x484, 0xbfe) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r5 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000400)) 14:33:41 executing program 1: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r6, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r9}, {}, {r8}, {r8}, {r8}, {}, {}, {0x0, r9}, {}, {0x0, r2}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r8, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {r8}, {}, {0x0, r9}, {r8, r9}, {0x0, r9}, {r7}, {}, {0x0, r9}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {r7}, {}, {r8}, {r7}, {}, {r8, r9}, {}, {r3, r9}, {0x0, r9}, {}, {}, {r8}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {r8}, {}, {0x0, r9}, {r7}, {r8, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {r7}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8, r9}, {r7, r9}, {r8}, {}, {r7, r9}, {r7}, {0x0, r9}, {}, {r7}, {}, {}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {r7, r9}, {0x0, r9}, {r8, r9}, {r7, r9}, {0x0, r9}, {}, {}, {r8}, {}, {}, {0x0, r9}, {r7}, {}, {r8}, {}, {}, {r8}, {0x0, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {0x0, r9}, {}, {r7}, {}, {}, {}, {0x0, r9}, {r7, r9}, {r8}, {}, {}, {}, {r8}, {}, {}, {}, {r7}, {r7}, {}, {r7}, {r8}, {0x0, r9}, {r7}, {}, {r7}, {0x0, r9}, {r8}, {r7, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {0x0, r9}, {r8}, {}, {}, {r7}, {}, {0x0, r9}, {r8, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {0x0, r9}, {r7}, {r8}, {r8, r9}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {r8}, {0x0, r9}, {}, {r8}, {r8}, {0x0, r4}, {}, {}, {0x0, r9}, {}, {r7, r9}, {r7}, {}, {}, {0x0, r9}, {}, {r8, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {r8, r9}, {r8}, {r7, r9}, {}, {}, {r8}, {r7, r9}, {0x0, r9}, {}, {0x0, r9}, {r8}, {r8}, {r7}, {}, {r8, r9}, {r8}, {0x0, r9}, {}, {}, {}, {r7, r9}], 0x1, "2156816c73038c"}) r10 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r10, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 442.737427][T29095] loop4: detected capacity change from 0 to 264192 [ 442.741875][T29098] loop3: detected capacity change from 0 to 264192 [ 442.757264][ C1] sd 0:0:1:0: tag#466 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 442.767050][ C1] sd 0:0:1:0: tag#466 CDB: opcode=0xe5 (vendor) [ 442.773351][ C1] sd 0:0:1:0: tag#466 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 442.785706][ C1] sd 0:0:1:0: tag#466 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 442.794764][ C1] sd 0:0:1:0: tag#466 CDB[20]: ba 14:33:41 executing program 2: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r6, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r9}, {}, {r8}, {r8}, {r8}, {}, {}, {0x0, r9}, {}, {0x0, r2}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r8, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {r8}, {}, {0x0, r9}, {r8, r9}, {0x0, r9}, {r7}, {}, {0x0, r9}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {r7}, {}, {r8}, {r7}, {}, {r8, r9}, {}, {r3, r9}, {0x0, r9}, {}, {}, {r8}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {0x0, r9}, {}, {}, {0x0, r9}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {r8}, {}, {0x0, r9}, {r7}, {r8, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8, r9}, {r7, r9}, {r8}, {}, {r7}, {r7}, {}, {}, {r7}, {}, {}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r7, r9}, {}, {}, {}, {r8}, {}, {}, {}, {r7}, {}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {r7}, {}, {}, {}, {0x0, r9}, {r7, r9}, {r8}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {r7}, {r8}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {r8}, {r7, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {0x0, r9}, {r8}, {}, {}, {r7}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {r8}, {r8, r9}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {r8}, {0x0, r9}, {}, {r8}, {r8}, {0x0, r4}, {}, {}, {}, {}, {0x0, r9}, {r7}, {}, {}, {0x0, r9}, {}, {r8, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {r7, r9}, {}, {}, {r8}, {r7}, {0x0, r9}, {}, {0x0, r9}, {r8}, {r8}, {r7}, {}, {0x0, r9}, {r8}], 0x1, "2156816c73038c"}) r10 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r10, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 442.836208][T29106] loop0: detected capacity change from 0 to 264192 14:33:41 executing program 5: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0x0, "0d4abfd4b32220"}) r9 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r9, 0xd000943d, &(0x7f0000054300)={0x0, [], 0x8, "7e6830ead6b793"}) r10 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r10, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000006, 0x100010, r11, 0x9472a000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x7, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)) r12 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r12, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 442.928823][ C1] sd 0:0:1:0: tag#467 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 442.938969][ C1] sd 0:0:1:0: tag#467 CDB: opcode=0xe5 (vendor) [ 442.945254][ C1] sd 0:0:1:0: tag#467 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 442.954228][ C1] sd 0:0:1:0: tag#467 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 442.963989][ C1] sd 0:0:1:0: tag#467 CDB[20]: ba 14:33:41 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x8, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{0x0, r6}, {}, {r5}, {r5}, {r5}, {}, {}, {0x0, r6}, {}, {0x0, r1}, {}, {}, {r4, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {r5}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r4}, {}, {0x0, r6}, {r5}, {}, {}, {r5}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {r5, r6}, {}, {r2, r6}, {0x0, r6}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {r5}, {}, {0x0, r6}, {r4}, {r5, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5, r6}, {r4, r6}, {r5}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {}, {}, {r5}, {}, {}, {0x0, r6}, {r4}, {}, {r5}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {r5}, {}, {}, {}, {r4}, {r4}, {}, {r4}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {}, {}, {r4}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r4}, {r5}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {r5}, {r5}, {0x0, r3}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {r4}, {}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {r4, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {r5}, {r4}, {}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {}, {r4, r6}], 0x1, "2156816c73038c"}) r7 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 443.174207][T29126] loop2: detected capacity change from 0 to 264192 [ 443.194854][T29131] loop5: detected capacity change from 0 to 264192 [ 443.244325][T29137] loop4: detected capacity change from 0 to 264192 14:33:42 executing program 2: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r6, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r9}, {}, {r8}, {r8}, {r8}, {}, {}, {0x0, r9}, {}, {0x0, r2}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r8, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {r8}, {}, {0x0, r9}, {r8, r9}, {0x0, r9}, {r7}, {}, {0x0, r9}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {r7}, {}, {r8}, {r7}, {}, {r8, r9}, {}, {r3, r9}, {0x0, r9}, {}, {}, {r8}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {0x0, r9}, {}, {}, {0x0, r9}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {r8}, {}, {0x0, r9}, {r7}, {r8, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8, r9}, {r7, r9}, {r8}, {}, {r7}, {r7}, {}, {}, {r7}, {}, {}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r7, r9}, {}, {}, {}, {r8}, {}, {}, {}, {r7}, {}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {r7}, {}, {}, {}, {0x0, r9}, {r7, r9}, {r8}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {r7}, {r8}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {r8}, {r7, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {0x0, r9}, {r8}, {}, {}, {r7}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {r8}, {r8, r9}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {r8}, {0x0, r9}, {}, {r8}, {r8}, {0x0, r4}, {}, {}, {}, {}, {0x0, r9}, {r7}, {}, {}, {0x0, r9}, {}, {r8, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {r7, r9}, {}, {}, {r8}, {r7}, {0x0, r9}, {}, {0x0, r9}, {r8}, {r8}, {r7}, {}, {0x0, r9}, {r8}], 0x1, "2156816c73038c"}) r10 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r10, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:33:42 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r5, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r8}, {}, {r7}, {r7}, {r7}, {}, {}, {0x0, r8}, {}, {0x0, r1}, {}, {}, {r6, r8}, {0x0, r8}, {}, {r7, r8}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {}, {0x0, r8}, {}, {}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {r7}, {}, {0x0, r8}, {r7, r8}, {0x0, r8}, {r6}, {}, {0x0, r8}, {r7}, {}, {}, {r7}, {0x0, r8}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {r6}, {}, {r7}, {r6}, {}, {r7, r8}, {}, {r2, r8}, {0x0, r8}, {}, {}, {r7}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {r7}, {}, {0x0, r8}, {r6}, {r7, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {r6}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7, r8}, {r6, r8}, {r7}, {}, {r6, r8}, {r6}, {0x0, r8}, {}, {r6}, {}, {}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {r6, r8}, {0x0, r8}, {r7, r8}, {r6, r8}, {0x0, r8}, {}, {}, {r7}, {}, {}, {0x0, r8}, {r6}, {}, {r7}, {}, {}, {r7}, {0x0, r8}, {0x0, r8}, {}, {0x0, r8}, {}, {0x0, r8}, {}, {r6}, {}, {}, {}, {0x0, r8}, {r6, r8}, {r7}, {}, {}, {}, {r7}, {}, {}, {}, {r6}, {r6}, {}, {r6}, {r7}, {0x0, r8}, {r6}, {}, {r6}, {0x0, r8}, {r7}, {r6, r8}, {0x0, r8}, {}, {0x0, r8}, {}, {}, {0x0, r8}, {r7}, {}, {}, {r6}, {}, {0x0, r8}, {r7, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {0x0, r8}, {r6}, {r7}, {r7, r8}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {r7}, {0x0, r8}, {}, {r7}, {r7}, {0x0, r3}, {}, {}, {0x0, r8}, {}, {r6, r8}, {r6}, {}, {}, {0x0, r8}, {}, {r7, r8}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {r7, r8}, {r7}, {r6, r8}, {}, {}, {r7}, {r6, r8}, {0x0, r8}, {}, {0x0, r8}, {r7}, {r7}, {r6}, {}, {r7, r8}, {r7}, {0x0, r8}, {}, {}, {}, {r6, r8}], 0x1, "2156816c73038c"}) r9 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r9, 0x0, 0x8400fffffffa) 14:33:42 executing program 1: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r6, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r9}, {}, {r8}, {r8}, {r8}, {}, {}, {0x0, r9}, {}, {0x0, r2}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r8, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {r8}, {}, {0x0, r9}, {r8, r9}, {0x0, r9}, {r7}, {}, {0x0, r9}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {r7}, {}, {r8}, {r7}, {}, {r8, r9}, {}, {r3, r9}, {0x0, r9}, {}, {}, {r8}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {r8}, {}, {0x0, r9}, {r7}, {r8, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {r7}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8, r9}, {r7, r9}, {r8}, {}, {r7, r9}, {r7}, {0x0, r9}, {}, {r7}, {}, {}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {r7, r9}, {0x0, r9}, {r8, r9}, {r7, r9}, {0x0, r9}, {}, {}, {r8}, {}, {}, {0x0, r9}, {r7}, {}, {r8}, {}, {}, {r8}, {0x0, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {0x0, r9}, {}, {r7}, {}, {}, {}, {0x0, r9}, {r7, r9}, {r8}, {}, {}, {}, {r8}, {}, {}, {}, {r7}, {r7}, {}, {r7}, {r8}, {0x0, r9}, {r7}, {}, {r7}, {0x0, r9}, {r8}, {r7, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {0x0, r9}, {r8}, {}, {}, {r7}, {}, {0x0, r9}, {r8, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {0x0, r9}, {r7}, {r8}, {r8, r9}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {r8}, {0x0, r9}, {}, {r8}, {r8}, {0x0, r4}, {}, {}, {0x0, r9}, {}, {r7, r9}, {r7}, {}, {}, {0x0, r9}, {}, {r8, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {r8, r9}, {r8}, {r7, r9}, {}, {}, {r8}, {r7, r9}, {0x0, r9}, {}, {0x0, r9}, {r8}, {r8}, {r7}, {}, {r8, r9}, {r8}, {0x0, r9}, {}, {}, {}, {r7, r9}], 0x1, "2156816c73038c"}) r10 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r10, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:33:42 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x8, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{0x0, r6}, {}, {r5}, {r5}, {r5}, {}, {}, {0x0, r6}, {}, {0x0, r1}, {}, {}, {r4, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {r5}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r4}, {}, {0x0, r6}, {r5}, {}, {}, {r5}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {r5, r6}, {}, {r2, r6}, {0x0, r6}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {r5}, {}, {0x0, r6}, {r4}, {r5, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5, r6}, {r4, r6}, {r5}, {}, {r4}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {}, {}, {r5}, {}, {}, {0x0, r6}, {r4}, {}, {r5}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {r5}, {}, {}, {}, {r4}, {r4}, {}, {r4}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {}, {}, {r4}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r4}, {r5}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {r5}, {r5}, {0x0, r3}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {r4}, {}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {r4, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {r5}, {r4}, {}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {}, {r4, r6}], 0x1, "2156816c73038c"}) r7 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:33:42 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="ac3b3dc1740cf1b4de69679d70b6915c3ed1e704f7ddb9f7781d877d431f9645dc809f90a4aa333ca199c315cfc66a9e69b944ad96603bc94c2124b77b8716ad4a0be6244cb987030662fe07e9137785d300b1635ee748f725f92695f4316f7be4e28e75e16b81e66725c675a19b08ef075d7fd1ccea98684c41431b82eeec6aa68979c8c22041042c5cb57d82280ba678781a691d9a", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000880080001000000000008000200010000001c000480050003000000000005001000000000000500030000000000"], 0x44}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="68010000", @ANYRES16=r1, @ANYBLOB="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"], 0x168}, 0x1, 0x0, 0x0, 0x9}, 0x4000000) set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) timerfd_create(0x9, 0x0) r3 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) timerfd_settime(r3, 0x1, &(0x7f0000000180)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f00000001c0)) chdir(&(0x7f0000000100)='./file1\x00') chdir(&(0x7f0000000000)='./file1\x00') r4 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r4, 0x1000) lseek(r4, 0x0, 0x2) set_mempolicy(0x8000, &(0x7f0000000240)=0x484, 0xbfe) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r5 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000400)) [ 443.730836][T29152] loop2: detected capacity change from 0 to 264192 [ 443.824448][T29163] loop3: detected capacity change from 0 to 264192 [ 443.903824][T29174] loop4: detected capacity change from 0 to 264192 [ 443.911785][T29175] loop0: detected capacity change from 0 to 264192 14:33:42 executing program 5: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0x0, "0d4abfd4b32220"}) r9 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r9, 0xd000943d, &(0x7f0000054300)={0x0, [], 0x8, "7e6830ead6b793"}) r10 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r10, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000006, 0x100010, r11, 0x9472a000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x7, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)) r12 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r12, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:33:42 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="ac3b3dc1740cf1b4de69679d70b6915c3ed1e704f7ddb9f7781d877d431f9645dc809f90a4aa333ca199c315cfc66a9e69b944ad96603bc94c2124b77b8716ad4a0be6244cb987030662fe07e9137785d300b1635ee748f725f92695f4316f7be4e28e75e16b81e66725c675a19b08ef075d7fd1ccea98684c41431b82eeec6aa68979c8c22041042c5cb57d82280ba678781a691d9a", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000880080001000000000008000200010000001c000480050003000000000005001000000000000500030000000000"], 0x44}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="68010000", @ANYRES16=r1, @ANYBLOB="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"], 0x168}, 0x1, 0x0, 0x0, 0x9}, 0x4000000) set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) timerfd_create(0x9, 0x0) r3 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) timerfd_settime(r3, 0x1, &(0x7f0000000180)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f00000001c0)) chdir(&(0x7f0000000100)='./file1\x00') chdir(&(0x7f0000000000)='./file1\x00') r4 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r4, 0x1000) lseek(r4, 0x0, 0x2) set_mempolicy(0x8000, &(0x7f0000000240)=0x484, 0xbfe) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r5 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) 14:33:42 executing program 2: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r6, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r9}, {}, {r8}, {r8}, {r8}, {}, {}, {0x0, r9}, {}, {0x0, r2}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r8, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {r8}, {}, {0x0, r9}, {r8, r9}, {0x0, r9}, {r7}, {}, {0x0, r9}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {r7}, {}, {r8}, {r7}, {}, {r8, r9}, {}, {r3, r9}, {0x0, r9}, {}, {}, {r8}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {0x0, r9}, {}, {}, {0x0, r9}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {r8}, {}, {0x0, r9}, {r7}, {r8, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8, r9}, {r7, r9}, {r8}, {}, {r7}, {r7}, {}, {}, {r7}, {}, {}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r7, r9}, {}, {}, {}, {r8}, {}, {}, {}, {r7}, {}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {r7}, {}, {}, {}, {0x0, r9}, {r7, r9}, {r8}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {r7}, {r8}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {r8}, {r7, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {0x0, r9}, {r8}, {}, {}, {r7}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {r8}, {r8, r9}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {r8}, {0x0, r9}, {}, {r8}, {r8}, {0x0, r4}, {}, {}, {}, {}, {0x0, r9}, {r7}, {}, {}, {0x0, r9}, {}, {r8, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {r7, r9}, {}, {}, {r8}, {r7}, {0x0, r9}, {}, {0x0, r9}, {r8}, {r8}, {r7}, {}, {0x0, r9}, {r8}], 0x1, "2156816c73038c"}) r10 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r10, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 444.232105][T29187] loop5: detected capacity change from 0 to 264192 14:33:42 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r5, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r8}, {}, {r7}, {r7}, {r7}, {}, {}, {0x0, r8}, {}, {0x0, r1}, {}, {}, {r6, r8}, {0x0, r8}, {}, {r7, r8}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {}, {0x0, r8}, {}, {}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {r7}, {}, {0x0, r8}, {r7, r8}, {0x0, r8}, {r6}, {}, {0x0, r8}, {r7}, {}, {}, {r7}, {0x0, r8}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {r6}, {}, {r7}, {r6}, {}, {r7, r8}, {}, {r2, r8}, {0x0, r8}, {}, {}, {r7}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {r7}, {}, {0x0, r8}, {r6}, {r7, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {r6}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7, r8}, {r6, r8}, {r7}, {}, {r6, r8}, {r6}, {0x0, r8}, {}, {r6}, {}, {}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {r6, r8}, {0x0, r8}, {r7, r8}, {r6, r8}, {0x0, r8}, {}, {}, {r7}, {}, {}, {0x0, r8}, {r6}, {}, {r7}, {}, {}, {r7}, {0x0, r8}, {0x0, r8}, {}, {0x0, r8}, {}, {0x0, r8}, {}, {r6}, {}, {}, {}, {0x0, r8}, {r6, r8}, {r7}, {}, {}, {}, {r7}, {}, {}, {}, {r6}, {r6}, {}, {r6}, {r7}, {0x0, r8}, {r6}, {}, {r6}, {0x0, r8}, {r7}, {r6, r8}, {0x0, r8}, {}, {0x0, r8}, {}, {}, {0x0, r8}, {r7}, {}, {}, {r6}, {}, {0x0, r8}, {r7, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {0x0, r8}, {r6}, {r7}, {r7, r8}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {r7}, {0x0, r8}, {}, {r7}, {r7}, {0x0, r3}, {}, {}, {0x0, r8}, {}, {r6, r8}, {r6}, {}, {}, {0x0, r8}, {}, {r7, r8}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {r7, r8}, {r7}, {r6, r8}, {}, {}, {r7}, {r6, r8}, {0x0, r8}, {}, {0x0, r8}, {r7}, {r7}, {r6}, {}, {r7, r8}, {r7}, {0x0, r8}, {}, {}, {}, {r6, r8}], 0x1, "2156816c73038c"}) r9 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r9, 0x0, 0x8400fffffffa) [ 444.326498][T29195] loop0: detected capacity change from 0 to 264192 [ 444.374277][T29204] loop2: detected capacity change from 0 to 264192 14:33:43 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x8, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{0x0, r6}, {}, {r5}, {r5}, {r5}, {}, {}, {0x0, r6}, {}, {0x0, r1}, {}, {}, {r4, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {r5}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r4}, {}, {0x0, r6}, {r5}, {}, {}, {r5}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {r5, r6}, {}, {r2, r6}, {0x0, r6}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {r5}, {}, {0x0, r6}, {r4}, {r5, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5, r6}, {r4, r6}, {r5}, {}, {r4}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {}, {}, {r5}, {}, {}, {0x0, r6}, {r4}, {}, {r5}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {r5}, {}, {}, {}, {r4}, {r4}, {}, {r4}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {}, {}, {r4}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r4}, {r5}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {r5}, {r5}, {0x0, r3}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {r4}, {}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {r4, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {r5}, {r4}, {}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {}, {r4, r6}], 0x1, "2156816c73038c"}) r7 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:33:43 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="ac3b3dc1740cf1b4de69679d70b6915c3ed1e704f7ddb9f7781d877d431f9645dc809f90a4aa333ca199c315cfc66a9e69b944ad96603bc94c2124b77b8716ad4a0be6244cb987030662fe07e9137785d300b1635ee748f725f92695f4316f7be4e28e75e16b81e66725c675a19b08ef075d7fd1ccea98684c41431b82eeec6aa68979c8c22041042c5cb57d82280ba678781a691d9a", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000880080001000000000008000200010000001c000480050003000000000005001000000000000500030000000000"], 0x44}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="68010000", @ANYRES16=r1, @ANYBLOB="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"], 0x168}, 0x1, 0x0, 0x0, 0x9}, 0x4000000) set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) timerfd_create(0x9, 0x0) r3 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) timerfd_settime(r3, 0x1, &(0x7f0000000180)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f00000001c0)) chdir(&(0x7f0000000100)='./file1\x00') chdir(&(0x7f0000000000)='./file1\x00') r4 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r4, 0x1000) lseek(r4, 0x0, 0x2) set_mempolicy(0x8000, &(0x7f0000000240)=0x484, 0xbfe) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) [ 444.553298][T29214] loop3: detected capacity change from 0 to 264192 [ 444.610299][T29223] loop4: detected capacity change from 0 to 264192 14:33:43 executing program 1: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r6, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r9}, {}, {r8}, {r8}, {r8}, {}, {}, {0x0, r9}, {}, {0x0, r2}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r8, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {r8}, {}, {0x0, r9}, {r8, r9}, {0x0, r9}, {r7}, {}, {0x0, r9}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {r7}, {}, {r8}, {r7}, {}, {r8, r9}, {}, {r3, r9}, {0x0, r9}, {}, {}, {r8}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {r8}, {}, {0x0, r9}, {r7}, {r8, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {r7}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8, r9}, {r7, r9}, {r8}, {}, {r7, r9}, {r7}, {0x0, r9}, {}, {r7}, {}, {}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {r7, r9}, {0x0, r9}, {r8, r9}, {r7, r9}, {0x0, r9}, {}, {}, {r8}, {}, {}, {0x0, r9}, {r7}, {}, {r8}, {}, {}, {r8}, {0x0, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {0x0, r9}, {}, {r7}, {}, {}, {}, {0x0, r9}, {r7, r9}, {r8}, {}, {}, {}, {r8}, {}, {}, {}, {r7}, {r7}, {}, {r7}, {r8}, {0x0, r9}, {r7}, {}, {r7}, {0x0, r9}, {r8}, {r7, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {0x0, r9}, {r8}, {}, {}, {r7}, {}, {0x0, r9}, {r8, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {0x0, r9}, {r7}, {r8}, {r8, r9}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {r8}, {0x0, r9}, {}, {r8}, {r8}, {0x0, r4}, {}, {}, {0x0, r9}, {}, {r7, r9}, {r7}, {}, {}, {0x0, r9}, {}, {r8, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {r8, r9}, {r8}, {r7, r9}, {}, {}, {r8}, {r7, r9}, {0x0, r9}, {}, {0x0, r9}, {r8}, {r8}, {r7}, {}, {r8, r9}, {r8}, {0x0, r9}, {}, {}, {}, {r7, r9}], 0x1, "2156816c73038c"}) r10 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r10, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 444.708169][T29231] loop0: detected capacity change from 0 to 264192 14:33:43 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="ac3b3dc1740cf1b4de69679d70b6915c3ed1e704f7ddb9f7781d877d431f9645dc809f90a4aa333ca199c315cfc66a9e69b944ad96603bc94c2124b77b8716ad4a0be6244cb987030662fe07e9137785d300b1635ee748f725f92695f4316f7be4e28e75e16b81e66725c675a19b08ef075d7fd1ccea98684c41431b82eeec6aa68979c8c22041042c5cb57d82280ba678781a691d9a", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000880080001000000000008000200010000001c000480050003000000000005001000000000000500030000000000"], 0x44}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="68010000", @ANYRES16=r1, @ANYBLOB="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"], 0x168}, 0x1, 0x0, 0x0, 0x9}, 0x4000000) set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) timerfd_create(0x9, 0x0) r3 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) timerfd_settime(r3, 0x1, &(0x7f0000000180)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f00000001c0)) chdir(&(0x7f0000000100)='./file1\x00') chdir(&(0x7f0000000000)='./file1\x00') r4 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r4, 0x1000) lseek(r4, 0x0, 0x2) set_mempolicy(0x8000, &(0x7f0000000240)=0x484, 0xbfe) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) 14:33:43 executing program 2: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r6, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r9}, {}, {r8}, {r8}, {r8}, {}, {}, {0x0, r9}, {}, {0x0, r2}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r8, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {r8}, {}, {0x0, r9}, {r8, r9}, {0x0, r9}, {r7}, {}, {0x0, r9}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {r7}, {}, {r8}, {r7}, {}, {r8, r9}, {}, {r3, r9}, {0x0, r9}, {}, {}, {r8}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {0x0, r9}, {}, {}, {r7}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {r8}, {}, {0x0, r9}, {r7}, {r8, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8, r9}, {r7, r9}, {r8}, {}, {r7}, {r7}, {}, {}, {r7}, {}, {}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r7, r9}, {}, {}, {}, {r8}, {}, {}, {}, {r7}, {}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {r7}, {}, {}, {}, {0x0, r9}, {r7, r9}, {r8}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {r7}, {r8}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {r8}, {r7, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {0x0, r9}, {r8}, {}, {}, {r7}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {r8}, {r8, r9}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {r8}, {0x0, r9}, {}, {r8}, {r8}, {0x0, r4}, {}, {}, {}, {}, {0x0, r9}, {r7}, {}, {}, {0x0, r9}, {}, {r8, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {r7, r9}, {}, {}, {r8}, {r7}, {0x0, r9}, {}, {0x0, r9}, {r8}, {r8}, {r7}, {}, {0x0, r9}, {r8}], 0x1, "2156816c73038c"}) r10 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r10, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 444.847674][T29245] loop0: detected capacity change from 0 to 264192 14:33:43 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="ac3b3dc1740cf1b4de69679d70b6915c3ed1e704f7ddb9f7781d877d431f9645dc809f90a4aa333ca199c315cfc66a9e69b944ad96603bc94c2124b77b8716ad4a0be6244cb987030662fe07e9137785d300b1635ee748f725f92695f4316f7be4e28e75e16b81e66725c675a19b08ef075d7fd1ccea98684c41431b82eeec6aa68979c8c22041042c5cb57d82280ba678781a691d9a", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000880080001000000000008000200010000001c000480050003000000000005001000000000000500030000000000"], 0x44}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="68010000", @ANYRES16=r1, @ANYBLOB="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"], 0x168}, 0x1, 0x0, 0x0, 0x9}, 0x4000000) set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) timerfd_create(0x9, 0x0) r3 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) timerfd_settime(r3, 0x1, &(0x7f0000000180)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f00000001c0)) chdir(&(0x7f0000000100)='./file1\x00') chdir(&(0x7f0000000000)='./file1\x00') r4 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r4, 0x1000) lseek(r4, 0x0, 0x2) set_mempolicy(0x8000, &(0x7f0000000240)=0x484, 0xbfe) 14:33:43 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="ac3b3dc1740cf1b4de69679d70b6915c3ed1e704f7ddb9f7781d877d431f9645dc809f90a4aa333ca199c315cfc66a9e69b944ad96603bc94c2124b77b8716ad4a0be6244cb987030662fe07e9137785d300b1635ee748f725f92695f4316f7be4e28e75e16b81e66725c675a19b08ef075d7fd1ccea98684c41431b82eeec6aa68979c8c22041042c5cb57d82280ba678781a691d9a", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000880080001000000000008000200010000001c000480050003000000000005001000000000000500030000000000"], 0x44}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="68010000", @ANYRES16=r1, @ANYBLOB="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"], 0x168}, 0x1, 0x0, 0x0, 0x9}, 0x4000000) set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) timerfd_create(0x9, 0x0) r3 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) timerfd_settime(r3, 0x1, &(0x7f0000000180)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f00000001c0)) chdir(&(0x7f0000000100)='./file1\x00') chdir(&(0x7f0000000000)='./file1\x00') r4 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r4, 0x1000) lseek(r4, 0x0, 0x2) [ 445.000641][T29250] loop0: detected capacity change from 0 to 264192 [ 445.040633][T29259] loop2: detected capacity change from 0 to 264192 14:33:43 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r5, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r8}, {}, {r7}, {r7}, {r7}, {}, {}, {0x0, r8}, {}, {0x0, r1}, {}, {}, {r6, r8}, {0x0, r8}, {}, {r7, r8}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {}, {0x0, r8}, {}, {}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {r7}, {}, {0x0, r8}, {r7, r8}, {0x0, r8}, {r6}, {}, {0x0, r8}, {r7}, {}, {}, {r7}, {0x0, r8}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {r6}, {}, {r7}, {r6}, {}, {r7, r8}, {}, {r2, r8}, {0x0, r8}, {}, {}, {r7}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {r7}, {}, {0x0, r8}, {r6}, {r7, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {r6}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7, r8}, {r6, r8}, {r7}, {}, {r6, r8}, {r6}, {0x0, r8}, {}, {r6}, {}, {}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {r6, r8}, {0x0, r8}, {r7, r8}, {r6, r8}, {0x0, r8}, {}, {}, {r7}, {}, {}, {0x0, r8}, {r6}, {}, {r7}, {}, {}, {r7}, {0x0, r8}, {0x0, r8}, {}, {0x0, r8}, {}, {0x0, r8}, {}, {r6}, {}, {}, {}, {0x0, r8}, {r6, r8}, {r7}, {}, {}, {}, {r7}, {}, {}, {}, {r6}, {r6}, {}, {r6}, {r7}, {0x0, r8}, {r6}, {}, {r6}, {0x0, r8}, {r7}, {r6, r8}, {0x0, r8}, {}, {0x0, r8}, {}, {}, {0x0, r8}, {r7}, {}, {}, {r6}, {}, {0x0, r8}, {r7, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {0x0, r8}, {r6}, {r7}, {r7, r8}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {r7}, {0x0, r8}, {}, {r7}, {r7}, {0x0, r3}, {}, {}, {0x0, r8}, {}, {r6, r8}, {r6}, {}, {}, {0x0, r8}, {}, {r7, r8}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {r7, r8}, {r7}, {r6, r8}, {}, {}, {r7}, {r6, r8}, {0x0, r8}, {}, {0x0, r8}, {r7}, {r7}, {r6}, {}, {r7, r8}, {r7}, {0x0, r8}, {}, {}, {}, {r6, r8}], 0x1, "2156816c73038c"}) r9 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r9, 0x0, 0x8400fffffffa) [ 445.126126][T29264] loop0: detected capacity change from 0 to 264192 14:33:43 executing program 5: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0x0, "0d4abfd4b32220"}) r9 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r9, 0xd000943d, &(0x7f0000054300)={0x0, [], 0x8, "7e6830ead6b793"}) r10 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r10, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000006, 0x100010, r11, 0x9472a000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x7, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)) r12 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r12, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:33:43 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x8, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{0x0, r6}, {}, {r5}, {r5}, {r5}, {}, {}, {0x0, r6}, {}, {0x0, r1}, {}, {}, {r4, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {r5}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r4}, {}, {0x0, r6}, {r5}, {}, {}, {r5}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {r5, r6}, {}, {r2, r6}, {0x0, r6}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {r5}, {}, {0x0, r6}, {r4}, {r5, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5, r6}, {r4, r6}, {r5}, {}, {r4}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {}, {}, {r5}, {}, {}, {0x0, r6}, {r4}, {}, {r5}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {r5}, {}, {}, {}, {r4}, {r4}, {}, {r4}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {}, {}, {r4}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r4}, {r5}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {r5}, {r5}, {0x0, r3}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {r4}, {}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {r4, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {r5}, {r4}, {}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {}, {r4, r6}], 0x1, "2156816c73038c"}) r7 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:33:43 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="ac3b3dc1740cf1b4de69679d70b6915c3ed1e704f7ddb9f7781d877d431f9645dc809f90a4aa333ca199c315cfc66a9e69b944ad96603bc94c2124b77b8716ad4a0be6244cb987030662fe07e9137785d300b1635ee748f725f92695f4316f7be4e28e75e16b81e66725c675a19b08ef075d7fd1ccea98684c41431b82eeec6aa68979c8c22041042c5cb57d82280ba678781a691d9a", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000880080001000000000008000200010000001c000480050003000000000005001000000000000500030000000000"], 0x44}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="68010000", @ANYRES16=r1, @ANYBLOB="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"], 0x168}, 0x1, 0x0, 0x0, 0x9}, 0x4000000) set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) timerfd_create(0x9, 0x0) r3 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) timerfd_settime(r3, 0x1, &(0x7f0000000180)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f00000001c0)) chdir(&(0x7f0000000100)='./file1\x00') chdir(&(0x7f0000000000)='./file1\x00') r4 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r4, 0x1000) [ 445.287871][T29278] loop5: detected capacity change from 0 to 264192 [ 445.300877][T29283] loop3: detected capacity change from 0 to 264192 [ 445.331479][T29280] loop0: detected capacity change from 0 to 264192 14:33:44 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="ac3b3dc1740cf1b4de69679d70b6915c3ed1e704f7ddb9f7781d877d431f9645dc809f90a4aa333ca199c315cfc66a9e69b944ad96603bc94c2124b77b8716ad4a0be6244cb987030662fe07e9137785d300b1635ee748f725f92695f4316f7be4e28e75e16b81e66725c675a19b08ef075d7fd1ccea98684c41431b82eeec6aa68979c8c22041042c5cb57d82280ba678781a691d9a", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000880080001000000000008000200010000001c000480050003000000000005001000000000000500030000000000"], 0x44}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="68010000", @ANYRES16=r1, @ANYBLOB="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"], 0x168}, 0x1, 0x0, 0x0, 0x9}, 0x4000000) set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) timerfd_create(0x9, 0x0) r3 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) timerfd_settime(r3, 0x1, &(0x7f0000000180)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f00000001c0)) chdir(&(0x7f0000000100)='./file1\x00') chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000140)='./bus\x00', 0x0) [ 445.403045][T29296] loop4: detected capacity change from 0 to 264192 [ 445.489557][T29301] loop0: detected capacity change from 0 to 264192 14:33:44 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="ac3b3dc1740cf1b4de69679d70b6915c3ed1e704f7ddb9f7781d877d431f9645dc809f90a4aa333ca199c315cfc66a9e69b944ad96603bc94c2124b77b8716ad4a0be6244cb987030662fe07e9137785d300b1635ee748f725f92695f4316f7be4e28e75e16b81e66725c675a19b08ef075d7fd1ccea98684c41431b82eeec6aa68979c8c22041042c5cb57d82280ba678781a691d9a", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000880080001000000000008000200010000001c000480050003000000000005001000000000000500030000000000"], 0x44}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="68010000", @ANYRES16=r1, @ANYBLOB="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"], 0x168}, 0x1, 0x0, 0x0, 0x9}, 0x4000000) set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) timerfd_create(0x9, 0x0) r3 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) timerfd_settime(r3, 0x1, &(0x7f0000000180)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f00000001c0)) chdir(&(0x7f0000000100)='./file1\x00') chdir(&(0x7f0000000000)='./file1\x00') 14:33:44 executing program 2: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r6, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r9}, {}, {r8}, {r8}, {r8}, {}, {}, {0x0, r9}, {}, {0x0, r2}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r8, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {r8}, {}, {0x0, r9}, {r8, r9}, {0x0, r9}, {r7}, {}, {0x0, r9}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {r7}, {}, {r8}, {r7}, {}, {r8, r9}, {}, {r3, r9}, {0x0, r9}, {}, {}, {r8}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {0x0, r9}, {}, {}, {r7}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {r8}, {}, {0x0, r9}, {r7}, {r8, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8, r9}, {r7, r9}, {r8}, {}, {r7}, {r7}, {}, {}, {r7}, {}, {}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r7, r9}, {}, {}, {}, {r8}, {}, {}, {}, {r7}, {}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {r7}, {}, {}, {}, {0x0, r9}, {r7, r9}, {r8}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {r7}, {r8}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {r8}, {r7, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {0x0, r9}, {r8}, {}, {}, {r7}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {r8}, {r8, r9}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {r8}, {0x0, r9}, {}, {r8}, {r8}, {0x0, r4}, {}, {}, {}, {}, {0x0, r9}, {r7}, {}, {}, {0x0, r9}, {}, {r8, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {r7, r9}, {}, {}, {r8}, {r7}, {0x0, r9}, {}, {0x0, r9}, {r8}, {r8}, {r7}, {}, {0x0, r9}, {r8}], 0x1, "2156816c73038c"}) r10 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r10, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 445.609978][T29309] loop0: detected capacity change from 0 to 264192 14:33:44 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="ac3b3dc1740cf1b4de69679d70b6915c3ed1e704f7ddb9f7781d877d431f9645dc809f90a4aa333ca199c315cfc66a9e69b944ad96603bc94c2124b77b8716ad4a0be6244cb987030662fe07e9137785d300b1635ee748f725f92695f4316f7be4e28e75e16b81e66725c675a19b08ef075d7fd1ccea98684c41431b82eeec6aa68979c8c22041042c5cb57d82280ba678781a691d9a", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000880080001000000000008000200010000001c000480050003000000000005001000000000000500030000000000"], 0x44}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="68010000", @ANYRES16=r1, @ANYBLOB="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"], 0x168}, 0x1, 0x0, 0x0, 0x9}, 0x4000000) set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) timerfd_create(0x9, 0x0) r3 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) timerfd_settime(r3, 0x1, &(0x7f0000000180)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f00000001c0)) chdir(&(0x7f0000000100)='./file1\x00') chdir(&(0x7f0000000000)='./file1\x00') r4 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r4, 0x1000) lseek(r4, 0x0, 0x2) set_mempolicy(0x8000, &(0x7f0000000240)=0x484, 0xbfe) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r5 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) 14:33:44 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="ac3b3dc1740cf1b4de69679d70b6915c3ed1e704f7ddb9f7781d877d431f9645dc809f90a4aa333ca199c315cfc66a9e69b944ad96603bc94c2124b77b8716ad4a0be6244cb987030662fe07e9137785d300b1635ee748f725f92695f4316f7be4e28e75e16b81e66725c675a19b08ef075d7fd1ccea98684c41431b82eeec6aa68979c8c22041042c5cb57d82280ba678781a691d9a", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000880080001000000000008000200010000001c000480050003000000000005001000000000000500030000000000"], 0x44}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="68010000", @ANYRES16=r1, @ANYBLOB="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"], 0x168}, 0x1, 0x0, 0x0, 0x9}, 0x4000000) set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) timerfd_create(0x9, 0x0) r3 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) timerfd_settime(r3, 0x1, &(0x7f0000000180)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f00000001c0)) chdir(&(0x7f0000000100)='./file1\x00') [ 445.745983][T29320] loop0: detected capacity change from 0 to 264192 [ 445.746437][T29324] loop2: detected capacity change from 0 to 264192 14:33:44 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="ac3b3dc1740cf1b4de69679d70b6915c3ed1e704f7ddb9f7781d877d431f9645dc809f90a4aa333ca199c315cfc66a9e69b944ad96603bc94c2124b77b8716ad4a0be6244cb987030662fe07e9137785d300b1635ee748f725f92695f4316f7be4e28e75e16b81e66725c675a19b08ef075d7fd1ccea98684c41431b82eeec6aa68979c8c22041042c5cb57d82280ba678781a691d9a", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000880080001000000000008000200010000001c000480050003000000000005001000000000000500030000000000"], 0x44}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="68010000", @ANYRES16=r1, @ANYBLOB="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"], 0x168}, 0x1, 0x0, 0x0, 0x9}, 0x4000000) set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) timerfd_create(0x9, 0x0) r3 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) timerfd_settime(r3, 0x1, &(0x7f0000000180)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f00000001c0)) 14:33:44 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x8, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{0x0, r6}, {}, {r5}, {r5}, {r5}, {}, {}, {0x0, r6}, {}, {0x0, r1}, {}, {}, {r4, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {r5}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r4}, {}, {0x0, r6}, {r5}, {}, {}, {r5}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {r5, r6}, {}, {r2, r6}, {0x0, r6}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {r5}, {}, {0x0, r6}, {r4}, {r5, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5, r6}, {r4, r6}, {}, {}, {r4, r6}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {}, {}, {r5}, {}, {}, {0x0, r6}, {r4}, {}, {r5}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {r5}, {}, {}, {}, {r4}, {r4}, {}, {r4}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {}, {}, {r4}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r4}, {r5}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {r5}, {r5}, {0x0, r3}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {r4}, {}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {r4, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {r5}, {r4}, {}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {}, {r4, r6}], 0x1, "2156816c73038c"}) r7 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:33:44 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r5, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r8}, {}, {r7}, {r7}, {r7}, {}, {}, {0x0, r8}, {}, {0x0, r1}, {}, {}, {r6, r8}, {0x0, r8}, {}, {r7, r8}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {}, {0x0, r8}, {}, {}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {r7}, {}, {0x0, r8}, {r7, r8}, {0x0, r8}, {r6}, {}, {0x0, r8}, {r7}, {}, {}, {r7}, {0x0, r8}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {r6}, {}, {r7}, {r6}, {}, {r7, r8}, {}, {r2, r8}, {0x0, r8}, {}, {}, {r7}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {r7}, {}, {0x0, r8}, {r6}, {r7, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {r6}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7, r8}, {r6, r8}, {r7}, {}, {r6, r8}, {r6}, {0x0, r8}, {}, {r6}, {}, {}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {r6, r8}, {0x0, r8}, {r7, r8}, {r6, r8}, {0x0, r8}, {}, {}, {r7}, {}, {}, {0x0, r8}, {r6}, {}, {r7}, {}, {}, {r7}, {0x0, r8}, {0x0, r8}, {}, {0x0, r8}, {}, {0x0, r8}, {}, {r6}, {}, {}, {}, {0x0, r8}, {r6, r8}, {r7}, {}, {}, {}, {r7}, {}, {}, {}, {r6}, {r6}, {}, {r6}, {r7}, {0x0, r8}, {r6}, {}, {r6}, {0x0, r8}, {r7}, {r6, r8}, {0x0, r8}, {}, {0x0, r8}, {}, {}, {0x0, r8}, {r7}, {}, {}, {r6}, {}, {0x0, r8}, {r7, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {0x0, r8}, {r6}, {r7}, {r7, r8}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {r7}, {0x0, r8}, {}, {r7}, {r7}, {0x0, r3}, {}, {}, {0x0, r8}, {}, {r6, r8}, {r6}, {}, {}, {0x0, r8}, {}, {r7, r8}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {r7, r8}, {r7}, {r6, r8}, {}, {}, {r7}, {r6, r8}, {0x0, r8}, {}, {0x0, r8}, {r7}, {r7}, {r6}, {}, {r7, r8}, {r7}, {0x0, r8}, {}, {}, {}, {r6, r8}], 0x1, "2156816c73038c"}) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 445.920467][T29333] loop0: detected capacity change from 0 to 264192 14:33:44 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="ac3b3dc1740cf1b4de69679d70b6915c3ed1e704f7ddb9f7781d877d431f9645dc809f90a4aa333ca199c315cfc66a9e69b944ad96603bc94c2124b77b8716ad4a0be6244cb987030662fe07e9137785d300b1635ee748f725f92695f4316f7be4e28e75e16b81e66725c675a19b08ef075d7fd1ccea98684c41431b82eeec6aa68979c8c22041042c5cb57d82280ba678781a691d9a", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000880080001000000000008000200010000001c000480050003000000000005001000000000000500030000000000"], 0x44}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="68010000", @ANYRES16=r1, @ANYBLOB="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"], 0x168}, 0x1, 0x0, 0x0, 0x9}, 0x4000000) set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) timerfd_create(0x9, 0x0) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) [ 446.026793][T29342] loop4: detected capacity change from 0 to 264192 [ 446.048283][T29350] loop3: detected capacity change from 0 to 264192 [ 446.061805][T29346] loop0: detected capacity change from 0 to 264192 [ 446.114697][ C1] scsi_io_completion_action: 13 callbacks suppressed [ 446.114744][ C1] sd 0:0:1:0: tag#481 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 446.131234][ C1] sd 0:0:1:0: tag#481 CDB: opcode=0xe5 (vendor) [ 446.137487][ C1] sd 0:0:1:0: tag#481 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 446.146463][ C1] sd 0:0:1:0: tag#481 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 446.155432][ C1] sd 0:0:1:0: tag#481 CDB[20]: ba 14:33:44 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="ac3b3dc1740cf1b4de69679d70b6915c3ed1e704f7ddb9f7781d877d431f9645dc809f90a4aa333ca199c315cfc66a9e69b944ad96603bc94c2124b77b8716ad4a0be6244cb987030662fe07e9137785d300b1635ee748f725f92695f4316f7be4e28e75e16b81e66725c675a19b08ef075d7fd1ccea98684c41431b82eeec6aa68979c8c22041042c5cb57d82280ba678781a691d9a", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000880080001000000000008000200010000001c000480050003000000000005001000000000000500030000000000"], 0x44}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="68010000", @ANYRES16=r1, @ANYBLOB="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"], 0x168}, 0x1, 0x0, 0x0, 0x9}, 0x4000000) set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) timerfd_create(0x9, 0x0) r3 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) timerfd_settime(r3, 0x1, &(0x7f0000000180)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f00000001c0)) chdir(&(0x7f0000000100)='./file1\x00') chdir(&(0x7f0000000000)='./file1\x00') r4 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r4, 0x1000) lseek(r4, 0x0, 0x2) set_mempolicy(0x8000, &(0x7f0000000240)=0x484, 0xbfe) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r5 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) 14:33:44 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="ac3b3dc1740cf1b4de69679d70b6915c3ed1e704f7ddb9f7781d877d431f9645dc809f90a4aa333ca199c315cfc66a9e69b944ad96603bc94c2124b77b8716ad4a0be6244cb987030662fe07e9137785d300b1635ee748f725f92695f4316f7be4e28e75e16b81e66725c675a19b08ef075d7fd1ccea98684c41431b82eeec6aa68979c8c22041042c5cb57d82280ba678781a691d9a", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000880080001000000000008000200010000001c000480050003000000000005001000000000000500030000000000"], 0x44}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="68010000", @ANYRES16=r1, @ANYBLOB="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"], 0x168}, 0x1, 0x0, 0x0, 0x9}, 0x4000000) set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) 14:33:44 executing program 2: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r6, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r9}, {}, {r8}, {r8}, {r8}, {}, {}, {0x0, r9}, {}, {0x0, r2}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r8, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {r8}, {}, {0x0, r9}, {r8, r9}, {0x0, r9}, {r7}, {}, {0x0, r9}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {r7}, {}, {r8}, {r7}, {}, {r8, r9}, {}, {r3, r9}, {0x0, r9}, {}, {}, {r8}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {0x0, r9}, {}, {}, {r7}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {r8}, {}, {0x0, r9}, {r7}, {r8, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8, r9}, {r7, r9}, {r8}, {}, {r7}, {r7}, {}, {}, {r7}, {}, {}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r7, r9}, {}, {}, {}, {r8}, {}, {}, {}, {r7}, {}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {r7}, {}, {}, {}, {0x0, r9}, {r7, r9}, {r8}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {r7}, {r8}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {r8}, {r7, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {0x0, r9}, {r8}, {}, {}, {r7}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {r8}, {r8, r9}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {r8}, {0x0, r9}, {}, {r8}, {r8}, {0x0, r4}, {}, {}, {}, {}, {0x0, r9}, {r7}, {}, {}, {0x0, r9}, {}, {r8, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {r7, r9}, {}, {}, {r8}, {r7}, {0x0, r9}, {}, {0x0, r9}, {r8}, {r8}, {r7}, {}, {0x0, r9}, {r8}], 0x1, "2156816c73038c"}) r10 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r10, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:33:44 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r5, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r8}, {}, {r7}, {r7}, {r7}, {}, {}, {0x0, r8}, {}, {0x0, r1}, {}, {}, {r6, r8}, {0x0, r8}, {}, {r7, r8}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {}, {0x0, r8}, {}, {}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {r7}, {}, {0x0, r8}, {r7, r8}, {0x0, r8}, {r6}, {}, {0x0, r8}, {r7}, {}, {}, {r7}, {0x0, r8}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {r6}, {}, {r7}, {r6}, {}, {r7, r8}, {}, {r2, r8}, {0x0, r8}, {}, {}, {r7}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {r7}, {}, {0x0, r8}, {r6}, {r7, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {r6}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7, r8}, {r6, r8}, {r7}, {}, {r6, r8}, {r6}, {0x0, r8}, {}, {r6}, {}, {}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {r6, r8}, {0x0, r8}, {r7, r8}, {r6, r8}, {0x0, r8}, {}, {}, {r7}, {}, {}, {0x0, r8}, {r6}, {}, {r7}, {}, {}, {r7}, {0x0, r8}, {0x0, r8}, {}, {0x0, r8}, {}, {0x0, r8}, {}, {r6}, {}, {}, {}, {0x0, r8}, {r6, r8}, {r7}, {}, {}, {}, {r7}, {}, {}, {}, {r6}, {r6}, {}, {r6}, {r7}, {0x0, r8}, {r6}, {}, {r6}, {0x0, r8}, {r7}, {r6, r8}, {0x0, r8}, {}, {0x0, r8}, {}, {}, {0x0, r8}, {r7}, {}, {}, {r6}, {}, {0x0, r8}, {r7, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {0x0, r8}, {r6}, {r7}, {r7, r8}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {r7}, {0x0, r8}, {}, {r7}, {r7}, {0x0, r3}, {}, {}, {0x0, r8}, {}, {r6, r8}, {r6}, {}, {}, {0x0, r8}, {}, {r7, r8}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {r7, r8}, {r7}, {r6, r8}, {}, {}, {r7}, {r6, r8}, {0x0, r8}, {}, {0x0, r8}, {r7}, {r7}, {r6}, {}, {r7, r8}, {r7}, {0x0, r8}, {}, {}, {}, {r6, r8}], 0x1, "2156816c73038c"}) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:33:44 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="ac3b3dc1740cf1b4de69679d70b6915c3ed1e704f7ddb9f7781d877d431f9645dc809f90a4aa333ca199c315cfc66a9e69b944ad96603bc94c2124b77b8716ad4a0be6244cb987030662fe07e9137785d300b1635ee748f725f92695f4316f7be4e28e75e16b81e66725c675a19b08ef075d7fd1ccea98684c41431b82eeec6aa68979c8c22041042c5cb57d82280ba678781a691d9a", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000880080001000000000008000200010000001c000480050003000000000005001000000000000500030000000000"], 0x44}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="68010000", @ANYRES16=r1, @ANYBLOB="010025bd7000fedbdf25010000005001088024000780000006004e00000008000500e327ec0e0800050073e1051008000500bb42a81e1400078008000500a5d8c379080005004b5503431c0007800800060060000000080005007f1b991508000500a8974e662c000780080006000000000008000600e2000000080006008100000008000600a400000008000600900000001c00078099ff0b009d0000000800060050000000080006002900000044000780080006000300000008000500f67be10a0800060030000000080006002300000008000600ea00000008000600eb00000008000500f8004b0508000500c816ee200c00078008000600750000002c00078008000500a3219122080005009e4df721080005001ccc4e7108000500e209e01b08000600d60000003400078008000600ce00000008000500a0ce9c260800050049a8ca3808000600dc00000008000500c700df1f08000500838bc57b04000880"], 0x168}, 0x1, 0x0, 0x0, 0x9}, 0x4000000) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) [ 446.264220][T29364] loop0: detected capacity change from 0 to 264192 [ 446.324098][T29376] loop3: detected capacity change from 0 to 264192 [ 446.335689][T29374] loop5: detected capacity change from 0 to 264192 [ 446.376888][ C0] sd 0:0:1:0: tag#482 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 446.386670][ C0] sd 0:0:1:0: tag#482 CDB: opcode=0xe5 (vendor) [ 446.392963][ C0] sd 0:0:1:0: tag#482 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 446.398017][T29387] loop2: detected capacity change from 0 to 264192 [ 446.401918][ C0] sd 0:0:1:0: tag#482 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 446.417360][ C0] sd 0:0:1:0: tag#482 CDB[20]: ba 14:33:45 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r5, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r8}, {}, {r7}, {r7}, {r7}, {}, {}, {0x0, r8}, {}, {0x0, r1}, {}, {}, {r6, r8}, {0x0, r8}, {}, {r7, r8}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {}, {0x0, r8}, {}, {}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {r7}, {}, {0x0, r8}, {r7, r8}, {0x0, r8}, {r6}, {}, {0x0, r8}, {r7}, {}, {}, {r7}, {0x0, r8}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {r6}, {}, {r7}, {r6}, {}, {r7, r8}, {}, {r2, r8}, {0x0, r8}, {}, {}, {r7}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {r7}, {}, {0x0, r8}, {r6}, {r7, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {r6}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7, r8}, {r6, r8}, {r7}, {}, {r6, r8}, {r6}, {0x0, r8}, {}, {r6}, {}, {}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {r6, r8}, {0x0, r8}, {r7, r8}, {r6, r8}, {0x0, r8}, {}, {}, {r7}, {}, {}, {0x0, r8}, {r6}, {}, {r7}, {}, {}, {r7}, {0x0, r8}, {0x0, r8}, {}, {0x0, r8}, {}, {0x0, r8}, {}, {r6}, {}, {}, {}, {0x0, r8}, {r6, r8}, {r7}, {}, {}, {}, {r7}, {}, {}, {}, {r6}, {r6}, {}, {r6}, {r7}, {0x0, r8}, {r6}, {}, {r6}, {0x0, r8}, {r7}, {r6, r8}, {0x0, r8}, {}, {0x0, r8}, {}, {}, {0x0, r8}, {r7}, {}, {}, {r6}, {}, {0x0, r8}, {r7, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {0x0, r8}, {r6}, {r7}, {r7, r8}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {r7}, {0x0, r8}, {}, {r7}, {r7}, {0x0, r3}, {}, {}, {0x0, r8}, {}, {r6, r8}, {r6}, {}, {}, {0x0, r8}, {}, {r7, r8}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {r7, r8}, {r7}, {r6, r8}, {}, {}, {r7}, {r6, r8}, {0x0, r8}, {}, {0x0, r8}, {r7}, {r7}, {r6}, {}, {r7, r8}, {r7}, {0x0, r8}, {}, {}, {}, {r6, r8}], 0x1, "2156816c73038c"}) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 446.454211][T29392] loop0: detected capacity change from 0 to 264192 [ 446.479546][ C1] sd 0:0:1:0: tag#483 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 446.489345][ C1] sd 0:0:1:0: tag#483 CDB: opcode=0xe5 (vendor) [ 446.495594][ C1] sd 0:0:1:0: tag#483 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 446.504623][ C1] sd 0:0:1:0: tag#483 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 446.513612][ C1] sd 0:0:1:0: tag#483 CDB[20]: ba 14:33:45 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="ac3b3dc1740cf1b4de69679d70b6915c3ed1e704f7ddb9f7781d877d431f9645dc809f90a4aa333ca199c315cfc66a9e69b944ad96603bc94c2124b77b8716ad4a0be6244cb987030662fe07e9137785d300b1635ee748f725f92695f4316f7be4e28e75e16b81e66725c675a19b08ef075d7fd1ccea98684c41431b82eeec6aa68979c8c22041042c5cb57d82280ba678781a691d9a", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000880080001000000000008000200010000001c000480050003000000000005001000000000000500030000000000"], 0x44}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="68010000", @ANYRES16=r1, @ANYBLOB="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"], 0x168}, 0x1, 0x0, 0x0, 0x9}, 0x4000000) set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) timerfd_create(0x9, 0x0) r3 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) timerfd_settime(r3, 0x1, &(0x7f0000000180)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f00000001c0)) chdir(&(0x7f0000000100)='./file1\x00') chdir(&(0x7f0000000000)='./file1\x00') r4 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r4, 0x1000) lseek(r4, 0x0, 0x2) set_mempolicy(0x8000, &(0x7f0000000240)=0x484, 0xbfe) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r5 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) 14:33:45 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x8, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{0x0, r6}, {}, {r5}, {r5}, {r5}, {}, {}, {0x0, r6}, {}, {0x0, r1}, {}, {}, {r4, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {r5}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r4}, {}, {0x0, r6}, {r5}, {}, {}, {r5}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {r5, r6}, {}, {r2, r6}, {0x0, r6}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {r5}, {}, {0x0, r6}, {r4}, {r5, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5, r6}, {r4, r6}, {}, {}, {r4, r6}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {}, {}, {r5}, {}, {}, {0x0, r6}, {r4}, {}, {r5}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {r5}, {}, {}, {}, {r4}, {r4}, {}, {r4}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {}, {}, {r4}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r4}, {r5}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {r5}, {r5}, {0x0, r3}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {r4}, {}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {r4, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {r5}, {r4}, {}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {}, {r4, r6}], 0x1, "2156816c73038c"}) r7 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:33:45 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="ac3b3dc1740cf1b4de69679d70b6915c3ed1e704f7ddb9f7781d877d431f9645dc809f90a4aa333ca199c315cfc66a9e69b944ad96603bc94c2124b77b8716ad4a0be6244cb987030662fe07e9137785d300b1635ee748f725f92695f4316f7be4e28e75e16b81e66725c675a19b08ef075d7fd1ccea98684c41431b82eeec6aa68979c8c22041042c5cb57d82280ba678781a691d9a", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000880080001000000000008000200010000001c000480050003000000000005001000000000000500030000000000"], 0x44}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="68010000", @ANYRES16=r1, @ANYBLOB="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"], 0x168}, 0x1, 0x0, 0x0, 0x9}, 0x4000000) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) [ 446.640656][T29400] loop3: detected capacity change from 0 to 264192 [ 446.671070][T29406] loop0: detected capacity change from 0 to 264192 14:33:45 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r2, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 446.681635][ C0] sd 0:0:1:0: tag#484 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 446.691399][ C0] sd 0:0:1:0: tag#484 CDB: opcode=0xe5 (vendor) [ 446.697649][ C0] sd 0:0:1:0: tag#484 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 446.707847][ C0] sd 0:0:1:0: tag#484 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 446.716814][ C0] sd 0:0:1:0: tag#484 CDB[20]: ba 14:33:45 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="ac3b3dc1740cf1b4de69679d70b6915c3ed1e704f7ddb9f7781d877d431f9645dc809f90a4aa333ca199c315cfc66a9e69b944ad96603bc94c2124b77b8716ad4a0be6244cb987030662fe07e9137785d300b1635ee748f725f92695f4316f7be4e28e75e16b81e66725c675a19b08ef075d7fd1ccea98684c41431b82eeec6aa68979c8c22041042c5cb57d82280ba678781a691d9a", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000880080001000000000008000200010000001c000480050003000000000005001000000000000500030000000000"], 0x44}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="68010000", @ANYRES16=r1, @ANYBLOB="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"], 0x168}, 0x1, 0x0, 0x0, 0x9}, 0x4000000) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) [ 446.757611][T29413] loop4: detected capacity change from 0 to 264192 [ 446.791631][T29417] loop3: detected capacity change from 0 to 264192 [ 446.833122][ C0] sd 0:0:1:0: tag#485 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 446.842944][ C0] sd 0:0:1:0: tag#485 CDB: opcode=0xe5 (vendor) [ 446.849222][ C0] sd 0:0:1:0: tag#485 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 446.858193][ C0] sd 0:0:1:0: tag#485 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 446.867344][ C0] sd 0:0:1:0: tag#485 CDB[20]: ba [ 446.883747][T29429] loop0: detected capacity change from 0 to 264192 14:33:45 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="ac3b3dc1740cf1b4de69679d70b6915c3ed1e704f7ddb9f7781d877d431f9645dc809f90a4aa333ca199c315cfc66a9e69b944ad96603bc94c2124b77b8716ad4a0be6244cb987030662fe07e9137785d300b1635ee748f725f92695f4316f7be4e28e75e16b81e66725c675a19b08ef075d7fd1ccea98684c41431b82eeec6aa68979c8c22041042c5cb57d82280ba678781a691d9a", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000880080001000000000008000200010000001c000480050003000000000005001000000000000500030000000000"], 0x44}}, 0x0) set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) [ 447.059553][T29436] loop0: detected capacity change from 0 to 264192 14:33:45 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="ac3b3dc1740cf1b4de69679d70b6915c3ed1e704f7ddb9f7781d877d431f9645dc809f90a4aa333ca199c315cfc66a9e69b944ad96603bc94c2124b77b8716ad4a0be6244cb987030662fe07e9137785d300b1635ee748f725f92695f4316f7be4e28e75e16b81e66725c675a19b08ef075d7fd1ccea98684c41431b82eeec6aa68979c8c22041042c5cb57d82280ba678781a691d9a", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000880080001000000000008000200010000001c000480050003000000000005001000000000000500030000000000"], 0x44}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="68010000", @ANYRES16=r1, @ANYBLOB="010025bd7000fedbdf25010000005001088024000780000006004e00000008000500e327ec0e0800050073e1051008000500bb42a81e1400078008000500a5d8c379080005004b5503431c0007800800060060000000080005007f1b991508000500a8974e662c000780080006000000000008000600e2000000080006008100000008000600a400000008000600900000001c00078099ff0b009d0000000800060050000000080006002900000044000780080006000300000008000500f67be10a0800060030000000080006002300000008000600ea00000008000600eb00000008000500f8004b0508000500c816ee200c00078008000600750000002c00078008000500a3219122080005009e4df721080005001ccc4e7108000500e209e01b08000600d60000003400078008000600ce00000008000500a0ce9c260800050049a8ca3808000600dc00000008000500c700df1f08000500838bc57b04000880"], 0x168}, 0x1, 0x0, 0x0, 0x9}, 0x4000000) set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) timerfd_create(0x9, 0x0) r3 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) timerfd_settime(r3, 0x1, &(0x7f0000000180)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f00000001c0)) chdir(&(0x7f0000000100)='./file1\x00') chdir(&(0x7f0000000000)='./file1\x00') r4 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r4, 0x1000) lseek(r4, 0x0, 0x2) set_mempolicy(0x8000, &(0x7f0000000240)=0x484, 0xbfe) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r5 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) 14:33:45 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) 14:33:45 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x8, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{0x0, r6}, {}, {r5}, {r5}, {r5}, {}, {}, {0x0, r6}, {}, {0x0, r1}, {}, {}, {r4, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {r5}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r4}, {}, {0x0, r6}, {r5}, {}, {}, {r5}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {r5, r6}, {}, {r2, r6}, {0x0, r6}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {r5}, {}, {0x0, r6}, {r4}, {r5, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5, r6}, {0x0, r6}, {}, {}, {r4, r6}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {}, {}, {r5}, {}, {}, {0x0, r6}, {r4}, {}, {r5}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {r5}, {}, {}, {}, {r4}, {r4}, {}, {r4}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {}, {}, {r4}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r4}, {r5}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {r5}, {r5}, {0x0, r3}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {r4}, {}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {r4, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {r5}, {r4}, {}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {}, {r4, r6}], 0x1, "2156816c73038c"}) r7 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:33:45 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r2, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:33:45 executing program 2: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r6, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r9}, {}, {r8}, {r8}, {r8}, {}, {}, {0x0, r9}, {}, {0x0, r2}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r8, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {r8}, {}, {0x0, r9}, {r8, r9}, {0x0, r9}, {r7}, {}, {0x0, r9}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {r7}, {}, {r8}, {r7}, {}, {r8, r9}, {}, {r3, r9}, {0x0, r9}, {}, {}, {r8}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {}, {}, {}, {r7, r9}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {r8}, {}, {0x0, r9}, {r7}, {r8, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8, r9}, {r7, r9}, {r8}, {}, {r7}, {r7}, {}, {}, {r7}, {}, {}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r7, r9}, {}, {}, {}, {r8}, {}, {}, {}, {r7}, {}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {r7}, {}, {}, {}, {0x0, r9}, {r7, r9}, {r8}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {r7}, {r8}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {r8}, {r7, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {0x0, r9}, {r8}, {}, {}, {r7}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {r8}, {r8, r9}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {r8}, {0x0, r9}, {}, {r8}, {r8}, {0x0, r4}, {}, {}, {}, {}, {0x0, r9}, {r7}, {}, {}, {0x0, r9}, {}, {r8, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {r7, r9}, {}, {}, {r8}, {r7}, {0x0, r9}, {}, {0x0, r9}, {r8}, {r8}, {r7}, {}, {0x0, r9}, {r8}], 0x1, "2156816c73038c"}) r10 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r10, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 447.285948][T29444] loop0: detected capacity change from 0 to 264192 14:33:45 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) [ 447.341189][T29458] loop4: detected capacity change from 0 to 264192 [ 447.395215][T29468] loop2: detected capacity change from 0 to 264192 [ 447.406001][T29470] loop3: detected capacity change from 0 to 264192 [ 447.436008][ C0] sd 0:0:1:0: tag#486 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 447.445865][ C0] sd 0:0:1:0: tag#486 CDB: opcode=0xe5 (vendor) [ 447.452079][T29474] loop5: detected capacity change from 0 to 264192 [ 447.452312][ C0] sd 0:0:1:0: tag#486 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 447.467847][ C0] sd 0:0:1:0: tag#486 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 447.476826][ C0] sd 0:0:1:0: tag#486 CDB[20]: ba [ 447.493118][T29483] loop0: detected capacity change from 0 to 264192 [ 447.504797][ C1] sd 0:0:1:0: tag#487 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 447.514580][ C1] sd 0:0:1:0: tag#487 CDB: opcode=0xe5 (vendor) [ 447.520858][ C1] sd 0:0:1:0: tag#487 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 447.529838][ C1] sd 0:0:1:0: tag#487 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 447.538966][ C1] sd 0:0:1:0: tag#487 CDB[20]: ba 14:33:46 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="ac3b3dc1740cf1b4de69679d70b6915c3ed1e704f7ddb9f7781d877d431f9645dc809f90a4aa333ca199c315cfc66a9e69b944ad96603bc94c2124b77b8716ad4a0be6244cb987030662fe07e9137785d300b1635ee748f725f92695f4316f7be4e28e75e16b81e66725c675a19b08ef075d7fd1ccea98684c41431b82eeec6aa68979c8c22041042c5cb57d82280ba678781a691d9a", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000880080001000000000008000200010000001c000480050003000000000005001000000000000500030000000000"], 0x44}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="68010000", @ANYRES16=r1, @ANYBLOB="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"], 0x168}, 0x1, 0x0, 0x0, 0x9}, 0x4000000) set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) timerfd_create(0x9, 0x0) r3 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) timerfd_settime(r3, 0x1, &(0x7f0000000180)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f00000001c0)) chdir(&(0x7f0000000100)='./file1\x00') chdir(&(0x7f0000000000)='./file1\x00') r4 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r4, 0x1000) lseek(r4, 0x0, 0x2) set_mempolicy(0x8000, &(0x7f0000000240)=0x484, 0xbfe) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r5 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) 14:33:46 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) [ 447.789447][T29493] loop0: detected capacity change from 0 to 264192 14:33:46 executing program 0: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) [ 447.909265][T29503] loop0: detected capacity change from 0 to 264192 14:33:46 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x8, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{0x0, r6}, {}, {r5}, {r5}, {r5}, {}, {}, {0x0, r6}, {}, {0x0, r1}, {}, {}, {r4, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {r5}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r4}, {}, {0x0, r6}, {r5}, {}, {}, {r5}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {r5, r6}, {}, {r2, r6}, {0x0, r6}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {r5}, {}, {0x0, r6}, {r4}, {r5, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5, r6}, {}, {}, {}, {r4, r6}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {}, {}, {r5}, {}, {}, {0x0, r6}, {r4}, {}, {r5}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {r5}, {}, {}, {}, {r4}, {r4}, {}, {r4}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {}, {}, {r4}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r4}, {r5}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {r5}, {r5}, {0x0, r3}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {r4}, {}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {r4, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {r5}, {r4}, {}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {}, {r4, r6}], 0x1, "2156816c73038c"}) r7 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:33:46 executing program 0: set_mempolicy(0x0, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) 14:33:46 executing program 2: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r6, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r9}, {}, {r8}, {r8}, {r8}, {}, {}, {0x0, r9}, {}, {0x0, r2}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r8, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {r8}, {}, {0x0, r9}, {r8, r9}, {0x0, r9}, {r7}, {}, {0x0, r9}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {r7}, {}, {r8}, {r7}, {}, {r8, r9}, {}, {r3, r9}, {0x0, r9}, {}, {}, {r8}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {}, {}, {}, {r7, r9}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {r8}, {}, {0x0, r9}, {r7}, {r8, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8, r9}, {r7, r9}, {r8}, {}, {r7}, {r7}, {}, {}, {r7}, {}, {}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r7, r9}, {}, {}, {}, {r8}, {}, {}, {}, {r7}, {}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {r7}, {}, {}, {}, {0x0, r9}, {r7, r9}, {r8}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {r7}, {r8}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {r8}, {r7, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {0x0, r9}, {r8}, {}, {}, {r7}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {r8}, {r8, r9}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {r8}, {0x0, r9}, {}, {r8}, {r8}, {0x0, r4}, {}, {}, {}, {}, {0x0, r9}, {r7}, {}, {}, {0x0, r9}, {}, {r8, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {r7, r9}, {}, {}, {r8}, {r7}, {0x0, r9}, {}, {0x0, r9}, {r8}, {r8}, {r7}, {}, {0x0, r9}, {r8}], 0x1, "2156816c73038c"}) r10 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r10, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 448.056141][T29509] loop0: detected capacity change from 0 to 264192 [ 448.107420][T29521] loop2: detected capacity change from 0 to 264192 [ 448.109899][T29522] loop4: detected capacity change from 0 to 264192 [ 448.165748][ C1] sd 0:0:1:0: tag#488 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 448.175548][ C1] sd 0:0:1:0: tag#488 CDB: opcode=0xe5 (vendor) [ 448.181838][ C1] sd 0:0:1:0: tag#488 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 448.190893][ C1] sd 0:0:1:0: tag#488 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 448.199854][ C1] sd 0:0:1:0: tag#488 CDB[20]: ba 14:33:46 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="ac3b3dc1740cf1b4de69679d70b6915c3ed1e704f7ddb9f7781d877d431f9645dc809f90a4aa333ca199c315cfc66a9e69b944ad96603bc94c2124b77b8716ad4a0be6244cb987030662fe07e9137785d300b1635ee748f725f92695f4316f7be4e28e75e16b81e66725c675a19b08ef075d7fd1ccea98684c41431b82eeec6aa68979c8c22041042c5cb57d82280ba678781a691d9a", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000880080001000000000008000200010000001c000480050003000000000005001000000000000500030000000000"], 0x44}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="68010000", @ANYRES16=r1, @ANYBLOB="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"], 0x168}, 0x1, 0x0, 0x0, 0x9}, 0x4000000) set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) timerfd_create(0x9, 0x0) r3 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) timerfd_settime(r3, 0x1, &(0x7f0000000180)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f00000001c0)) chdir(&(0x7f0000000100)='./file1\x00') chdir(&(0x7f0000000000)='./file1\x00') r4 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r4, 0x1000) lseek(r4, 0x0, 0x2) set_mempolicy(0x8000, &(0x7f0000000240)=0x484, 0xbfe) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r5 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) 14:33:46 executing program 0: set_mempolicy(0x0, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) 14:33:46 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r2, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 448.327789][T29532] loop0: detected capacity change from 0 to 264192 14:33:47 executing program 0: set_mempolicy(0x0, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) [ 448.429242][T29548] loop3: detected capacity change from 0 to 264192 [ 448.434469][T29550] loop0: detected capacity change from 0 to 264192 [ 448.457739][T29553] loop5: detected capacity change from 0 to 264192 14:33:47 executing program 0: set_mempolicy(0x4001, 0x0, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) [ 448.502195][ C0] sd 0:0:1:0: tag#489 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 448.511989][ C0] sd 0:0:1:0: tag#489 CDB: opcode=0xe5 (vendor) [ 448.518243][ C0] sd 0:0:1:0: tag#489 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 448.527262][ C0] sd 0:0:1:0: tag#489 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 448.536236][ C0] sd 0:0:1:0: tag#489 CDB[20]: ba 14:33:47 executing program 2: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r6, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r9}, {}, {r8}, {r8}, {r8}, {}, {}, {0x0, r9}, {}, {0x0, r2}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r8, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {r8}, {}, {0x0, r9}, {r8, r9}, {0x0, r9}, {r7}, {}, {0x0, r9}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {r7}, {}, {r8}, {r7}, {}, {r8, r9}, {}, {r3, r9}, {0x0, r9}, {}, {}, {r8}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {}, {}, {}, {r7, r9}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {r8}, {}, {0x0, r9}, {r7}, {r8, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8, r9}, {r7, r9}, {r8}, {}, {r7}, {r7}, {}, {}, {r7}, {}, {}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r7, r9}, {}, {}, {}, {r8}, {}, {}, {}, {r7}, {}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {r7}, {}, {}, {}, {0x0, r9}, {r7, r9}, {r8}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {r7}, {r8}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {r8}, {r7, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {0x0, r9}, {r8}, {}, {}, {r7}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {r8}, {r8, r9}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {r8}, {0x0, r9}, {}, {r8}, {r8}, {0x0, r4}, {}, {}, {}, {}, {0x0, r9}, {r7}, {}, {}, {0x0, r9}, {}, {r8, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {r7, r9}, {}, {}, {r8}, {r7}, {0x0, r9}, {}, {0x0, r9}, {r8}, {r8}, {r7}, {}, {0x0, r9}, {r8}], 0x1, "2156816c73038c"}) r10 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r10, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:33:47 executing program 1: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r6, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r9}, {}, {r8}, {r8}, {r8}, {}, {}, {0x0, r9}, {}, {0x0, r2}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r8, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {r8}, {}, {0x0, r9}, {r8, r9}, {0x0, r9}, {r7}, {}, {0x0, r9}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {r7}, {}, {r8}, {r7}, {}, {r8, r9}, {}, {r3, r9}, {0x0, r9}, {}, {}, {r8}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {}, {}, {}, {r7, r9}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {r8}, {}, {0x0, r9}, {r7}, {r8, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8, r9}, {r7, r9}, {r8}, {}, {r7}, {r7}, {}, {}, {r7}, {}, {}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r7, r9}, {}, {}, {}, {r8}, {}, {}, {}, {r7}, {}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {r7}, {}, {}, {}, {0x0, r9}, {r7, r9}, {r8}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {r7}, {r8}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {r8}, {r7, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {0x0, r9}, {r8}, {}, {}, {r7}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {r8}, {r8, r9}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {r8}, {0x0, r9}, {}, {r8}, {r8}, {0x0, r4}, {}, {}, {}, {}, {0x0, r9}, {r7}, {}, {}, {0x0, r9}, {}, {r8, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {r7, r9}, {}, {}, {r8}, {r7}, {0x0, r9}, {}, {0x0, r9}, {r8}, {r8}, {r7}, {}, {0x0, r9}, {r8}], 0x1, "2156816c73038c"}) r10 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r10, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:33:47 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x8, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{0x0, r6}, {}, {r5}, {r5}, {r5}, {}, {}, {0x0, r6}, {}, {0x0, r1}, {}, {}, {r4, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {r5}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r4}, {}, {0x0, r6}, {r5}, {}, {}, {r5}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {r5, r6}, {}, {r2, r6}, {0x0, r6}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {r5}, {}, {0x0, r6}, {r4}, {r5, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5, r6}, {}, {}, {}, {r4, r6}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {}, {}, {r5}, {}, {}, {0x0, r6}, {r4}, {}, {r5}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {r5}, {}, {}, {}, {r4}, {r4}, {}, {r4}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {}, {}, {r4}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r4}, {r5}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {r5}, {r5}, {0x0, r3}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {r4}, {}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {r4, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {r5}, {r4}, {}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {}, {r4, r6}], 0x1, "2156816c73038c"}) r7 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 448.735829][T29568] loop0: detected capacity change from 0 to 264192 14:33:47 executing program 0: set_mempolicy(0x4001, 0x0, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) [ 448.798266][T29576] loop4: detected capacity change from 0 to 264192 [ 448.799520][T29575] loop2: detected capacity change from 0 to 264192 [ 448.884562][ C1] sd 0:0:1:0: tag#490 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 448.894372][ C1] sd 0:0:1:0: tag#490 CDB: opcode=0xe5 (vendor) [ 448.900659][ C1] sd 0:0:1:0: tag#490 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 448.909629][ C1] sd 0:0:1:0: tag#490 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 448.918960][ C1] sd 0:0:1:0: tag#490 CDB[20]: ba 14:33:47 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r2, 0x9472a000) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 448.985787][T29581] loop0: detected capacity change from 0 to 264192 14:33:47 executing program 0: set_mempolicy(0x4001, 0x0, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) [ 449.147446][T29600] loop3: detected capacity change from 0 to 264192 [ 449.150623][T29595] loop0: detected capacity change from 0 to 264192 14:33:47 executing program 0: set_mempolicy(0x4001, &(0x7f0000000140), 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) [ 449.300398][T29609] loop0: detected capacity change from 0 to 264192 14:33:47 executing program 2: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r6, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r9}, {}, {r8}, {r8}, {r8}, {}, {}, {0x0, r9}, {}, {0x0, r2}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r8, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {r8}, {}, {0x0, r9}, {r8, r9}, {0x0, r9}, {r7}, {}, {0x0, r9}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {r7}, {}, {r8}, {r7}, {}, {r8, r9}, {}, {r3, r9}, {0x0, r9}, {}, {}, {r8}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {r8}, {}, {0x0, r9}, {r7}, {r8, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8, r9}, {r7, r9}, {r8}, {}, {r7}, {r7}, {}, {}, {r7}, {}, {}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r7, r9}, {}, {}, {}, {r8}, {}, {}, {}, {r7}, {}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {r7}, {}, {}, {}, {0x0, r9}, {r7, r9}, {r8}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {r7}, {r8}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {r8}, {r7, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {0x0, r9}, {r8}, {}, {}, {r7}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {r8}, {r8, r9}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {r8}, {0x0, r9}, {}, {r8}, {r8}, {0x0, r4}, {}, {}, {}, {}, {0x0, r9}, {r7}, {}, {}, {0x0, r9}, {}, {r8, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {r7, r9}, {}, {}, {r8}, {r7}, {0x0, r9}, {}, {0x0, r9}, {r8}, {r8}, {r7}, {}, {0x0, r9}, {r8}], 0x1, "2156816c73038c"}) r10 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r10, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:33:47 executing program 5: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0x0, "0d4abfd4b32220"}) r9 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r9, 0xd000943d, &(0x7f0000054300)={0x0, [], 0x8, "7e6830ead6b793"}) r10 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r10, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000006, 0x100010, r11, 0x9472a000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x7, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)) r12 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r12, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:33:47 executing program 0: set_mempolicy(0x4001, &(0x7f0000000140), 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) 14:33:48 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x8, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{0x0, r6}, {}, {r5}, {r5}, {r5}, {}, {}, {0x0, r6}, {}, {0x0, r1}, {}, {}, {r4, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {r5}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r4}, {}, {0x0, r6}, {r5}, {}, {}, {r5}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {r5, r6}, {}, {r2, r6}, {0x0, r6}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {r5}, {}, {0x0, r6}, {r4}, {r5, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5, r6}, {}, {}, {}, {r4, r6}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {}, {}, {r5}, {}, {}, {0x0, r6}, {r4}, {}, {r5}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {r5}, {}, {}, {}, {r4}, {r4}, {}, {r4}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {}, {}, {r4}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r4}, {r5}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {r5}, {r5}, {0x0, r3}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {r4}, {}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {r4, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {r5}, {r4}, {}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {}, {r4, r6}], 0x1, "2156816c73038c"}) r7 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 449.411430][T29622] loop2: detected capacity change from 0 to 264192 [ 449.412054][T29621] loop0: detected capacity change from 0 to 264192 14:33:48 executing program 0: set_mempolicy(0x4001, &(0x7f0000000140), 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) [ 449.573575][T29639] loop5: detected capacity change from 0 to 264192 [ 449.575413][T29638] loop4: detected capacity change from 0 to 264192 [ 449.609508][T29637] loop0: detected capacity change from 0 to 264192 14:33:48 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r2, 0x9472a000) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:33:48 executing program 1: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0x0, "0d4abfd4b32220"}) r9 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r9, 0xd000943d, &(0x7f0000054300)={0x0, [], 0x8, "7e6830ead6b793"}) r10 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r10, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000006, 0x100010, r11, 0x9472a000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x7, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)) r12 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r12, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:33:48 executing program 0: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x0) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) [ 449.836406][T29658] loop0: detected capacity change from 0 to 264192 [ 449.845899][T29660] loop3: detected capacity change from 0 to 264192 14:33:48 executing program 0: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x0) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) 14:33:48 executing program 2: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r6, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r9}, {}, {r8}, {r8}, {r8}, {}, {}, {0x0, r9}, {}, {0x0, r2}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r8, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {r8}, {}, {0x0, r9}, {r8, r9}, {0x0, r9}, {r7}, {}, {0x0, r9}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {r7}, {}, {r8}, {r7}, {}, {r8, r9}, {}, {r3, r9}, {0x0, r9}, {}, {}, {r8}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {r8}, {}, {0x0, r9}, {r7}, {r8, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8, r9}, {r7, r9}, {r8}, {}, {r7}, {r7}, {}, {}, {r7}, {}, {}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r7, r9}, {}, {}, {}, {r8}, {}, {}, {}, {r7}, {}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {r7}, {}, {}, {}, {0x0, r9}, {r7, r9}, {r8}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {r7}, {r8}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {r8}, {r7, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {0x0, r9}, {r8}, {}, {}, {r7}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {r8}, {r8, r9}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {r8}, {0x0, r9}, {}, {r8}, {r8}, {0x0, r4}, {}, {}, {}, {}, {0x0, r9}, {r7}, {}, {}, {0x0, r9}, {}, {r8, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {r7, r9}, {}, {}, {r8}, {r7}, {0x0, r9}, {}, {0x0, r9}, {r8}, {r8}, {r7}, {}, {0x0, r9}, {r8}], 0x1, "2156816c73038c"}) r10 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r10, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 449.989360][T29669] loop0: detected capacity change from 0 to 264192 14:33:48 executing program 0: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x0) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) 14:33:48 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x8, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{0x0, r6}, {}, {r5}, {r5}, {r5}, {}, {}, {0x0, r6}, {}, {0x0, r1}, {}, {}, {r4, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {r5}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r4}, {}, {0x0, r6}, {r5}, {}, {}, {r5}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {r5, r6}, {}, {r2, r6}, {0x0, r6}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {r5}, {}, {0x0, r6}, {r4}, {r5, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {r4, r6}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {}, {}, {r5}, {}, {}, {0x0, r6}, {r4}, {}, {r5}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {r5}, {}, {}, {}, {r4}, {r4}, {}, {r4}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {}, {}, {r4}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r4}, {r5}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {r5}, {r5}, {0x0, r3}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {r4}, {}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {r4, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {r5}, {r4}, {}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {}, {r4, r6}], 0x1, "2156816c73038c"}) r7 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 450.099230][T29679] loop0: detected capacity change from 0 to 264192 [ 450.111816][T29681] loop2: detected capacity change from 0 to 264192 [ 450.220916][T29692] loop4: detected capacity change from 0 to 264192 14:33:49 executing program 5: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r6, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r9}, {}, {r8}, {r8}, {r8}, {}, {}, {0x0, r9}, {}, {0x0, r2}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r8, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {r8}, {}, {0x0, r9}, {r8, r9}, {0x0, r9}, {r7}, {}, {0x0, r9}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {r7}, {}, {r8}, {r7}, {}, {r8, r9}, {}, {r3, r9}, {0x0, r9}, {}, {}, {r8}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {r8}, {}, {0x0, r9}, {r7}, {r8, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {r7}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8, r9}, {r7, r9}, {r8}, {}, {r7, r9}, {r7}, {0x0, r9}, {}, {r7}, {}, {}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {r7, r9}, {0x0, r9}, {r8, r9}, {r7, r9}, {0x0, r9}, {}, {}, {r8}, {}, {}, {0x0, r9}, {r7}, {}, {r8}, {}, {}, {r8}, {0x0, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {0x0, r9}, {}, {r7}, {}, {}, {}, {0x0, r9}, {r7, r9}, {r8}, {}, {}, {}, {r8}, {}, {}, {}, {r7}, {r7}, {}, {r7}, {r8}, {0x0, r9}, {r7}, {}, {r7}, {0x0, r9}, {r8}, {r7, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {0x0, r9}, {r8}, {}, {}, {r7}, {}, {0x0, r9}, {r8, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {0x0, r9}, {r7}, {r8}, {r8, r9}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {r8}, {0x0, r9}, {}, {r8}, {r8}, {0x0, r4}, {}, {}, {0x0, r9}, {}, {r7, r9}, {r7}, {}, {}, {0x0, r9}, {}, {r8, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {r8, r9}, {r8}, {r7, r9}, {}, {}, {r8}, {r7, r9}, {0x0, r9}, {}, {0x0, r9}, {r8}, {r8}, {r7}, {}, {r8, r9}, {r8}, {0x0, r9}, {}, {}, {}, {r7, r9}], 0x1, "2156816c73038c"}) r10 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r10, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:33:49 executing program 0: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) 14:33:49 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r2, 0x9472a000) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:33:49 executing program 2: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r6, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r9}, {}, {r8}, {r8}, {r8}, {}, {}, {0x0, r9}, {}, {0x0, r2}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r8, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {r8}, {}, {0x0, r9}, {r8, r9}, {0x0, r9}, {r7}, {}, {0x0, r9}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {r7}, {}, {r8}, {r7}, {}, {r8, r9}, {}, {r3, r9}, {0x0, r9}, {}, {}, {r8}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {r8}, {}, {0x0, r9}, {r7}, {r8, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8, r9}, {r7, r9}, {r8}, {}, {r7}, {r7}, {}, {}, {r7}, {}, {}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r7, r9}, {}, {}, {}, {r8}, {}, {}, {}, {r7}, {}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {r7}, {}, {}, {}, {0x0, r9}, {r7, r9}, {r8}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {r7}, {r8}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {r8}, {r7, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {0x0, r9}, {r8}, {}, {}, {r7}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {r8}, {r8, r9}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {r8}, {0x0, r9}, {}, {r8}, {r8}, {0x0, r4}, {}, {}, {}, {}, {0x0, r9}, {r7}, {}, {}, {0x0, r9}, {}, {r8, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {r7, r9}, {}, {}, {r8}, {r7}, {0x0, r9}, {}, {0x0, r9}, {r8}, {r8}, {r7}, {}, {0x0, r9}, {r8}], 0x1, "2156816c73038c"}) r10 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r10, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:33:49 executing program 0: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) [ 450.509505][T29703] loop0: detected capacity change from 0 to 264192 [ 450.538838][T29707] loop3: detected capacity change from 0 to 264192 14:33:49 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x8, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{0x0, r6}, {}, {r5}, {r5}, {r5}, {}, {}, {0x0, r6}, {}, {0x0, r1}, {}, {}, {r4, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {r5}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r4}, {}, {0x0, r6}, {r5}, {}, {}, {r5}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {r5, r6}, {}, {r2, r6}, {0x0, r6}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {r5}, {}, {0x0, r6}, {r4}, {r5, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {r4, r6}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {}, {}, {r5}, {}, {}, {0x0, r6}, {r4}, {}, {r5}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {r5}, {}, {}, {}, {r4}, {r4}, {}, {r4}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {}, {}, {r4}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r4}, {r5}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {r5}, {r5}, {0x0, r3}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {r4}, {}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {r4, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {r5}, {r4}, {}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {}, {r4, r6}], 0x1, "2156816c73038c"}) r7 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 450.657297][T29720] loop5: detected capacity change from 0 to 264192 [ 450.696985][T29729] loop2: detected capacity change from 0 to 264192 [ 450.706875][T29730] loop0: detected capacity change from 0 to 264192 14:33:49 executing program 1: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r6, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r9}, {}, {r8}, {r8}, {r8}, {}, {}, {0x0, r9}, {}, {0x0, r2}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r8, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {r8}, {}, {0x0, r9}, {r8, r9}, {0x0, r9}, {r7}, {}, {0x0, r9}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {r7}, {}, {r8}, {r7}, {}, {r8, r9}, {}, {r3, r9}, {0x0, r9}, {}, {}, {r8}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {r8}, {}, {0x0, r9}, {r7}, {r8, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {r7}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8, r9}, {r7, r9}, {r8}, {}, {r7, r9}, {r7}, {0x0, r9}, {}, {r7}, {}, {}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {r7, r9}, {0x0, r9}, {r8, r9}, {r7, r9}, {0x0, r9}, {}, {}, {r8}, {}, {}, {0x0, r9}, {r7}, {}, {r8}, {}, {}, {r8}, {0x0, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {0x0, r9}, {}, {r7}, {}, {}, {}, {0x0, r9}, {r7, r9}, {r8}, {}, {}, {}, {r8}, {}, {}, {}, {r7}, {r7}, {}, {r7}, {r8}, {0x0, r9}, {r7}, {}, {r7}, {0x0, r9}, {r8}, {r7, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {0x0, r9}, {r8}, {}, {}, {r7}, {}, {0x0, r9}, {r8, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {0x0, r9}, {r7}, {r8}, {r8, r9}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {r8}, {0x0, r9}, {}, {r8}, {r8}, {0x0, r4}, {}, {}, {0x0, r9}, {}, {r7, r9}, {r7}, {}, {}, {0x0, r9}, {}, {r8, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {r8, r9}, {r8}, {r7, r9}, {}, {}, {r8}, {r7, r9}, {0x0, r9}, {}, {0x0, r9}, {r8}, {r8}, {r7}, {}, {r8, r9}, {r8}, {0x0, r9}, {}, {}, {}, {r7, r9}], 0x1, "2156816c73038c"}) r10 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r10, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:33:49 executing program 0: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) [ 450.844799][T29741] loop4: detected capacity change from 0 to 264192 [ 450.883905][T29747] loop0: detected capacity change from 0 to 264192 14:33:49 executing program 0: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), 0x0, 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) 14:33:49 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 451.067770][T29759] loop0: detected capacity change from 0 to 264192 14:33:49 executing program 0: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), 0x0, 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) 14:33:49 executing program 5: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r6, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r9}, {}, {r8}, {r8}, {r8}, {}, {}, {0x0, r9}, {}, {0x0, r2}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r8, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {r8}, {}, {0x0, r9}, {r8, r9}, {0x0, r9}, {r7}, {}, {0x0, r9}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {r7}, {}, {r8}, {r7}, {}, {r8, r9}, {}, {r3, r9}, {0x0, r9}, {}, {}, {r8}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {r8}, {}, {0x0, r9}, {r7}, {r8, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {r7}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8, r9}, {r7, r9}, {r8}, {}, {r7, r9}, {r7}, {0x0, r9}, {}, {r7}, {}, {}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {r7, r9}, {0x0, r9}, {r8, r9}, {r7, r9}, {0x0, r9}, {}, {}, {r8}, {}, {}, {0x0, r9}, {r7}, {}, {r8}, {}, {}, {r8}, {0x0, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {0x0, r9}, {}, {r7}, {}, {}, {}, {0x0, r9}, {r7, r9}, {r8}, {}, {}, {}, {r8}, {}, {}, {}, {r7}, {r7}, {}, {r7}, {r8}, {0x0, r9}, {r7}, {}, {r7}, {0x0, r9}, {r8}, {r7, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {0x0, r9}, {r8}, {}, {}, {r7}, {}, {0x0, r9}, {r8, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {0x0, r9}, {r7}, {r8}, {r8, r9}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {r8}, {0x0, r9}, {}, {r8}, {r8}, {0x0, r4}, {}, {}, {0x0, r9}, {}, {r7, r9}, {r7}, {}, {}, {0x0, r9}, {}, {r8, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {r8, r9}, {r8}, {r7, r9}, {}, {}, {r8}, {r7, r9}, {0x0, r9}, {}, {0x0, r9}, {r8}, {r8}, {r7}, {}, {r8, r9}, {r8}, {0x0, r9}, {}, {}, {}, {r7, r9}], 0x1, "2156816c73038c"}) r10 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r10, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:33:49 executing program 2: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r6, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r9}, {}, {r8}, {r8}, {r8}, {}, {}, {0x0, r9}, {}, {0x0, r2}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r8, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {r8}, {}, {0x0, r9}, {r8, r9}, {0x0, r9}, {r7}, {}, {0x0, r9}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {r7}, {}, {r8}, {r7}, {}, {r8, r9}, {}, {r3, r9}, {0x0, r9}, {}, {}, {r8}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {r8}, {}, {0x0, r9}, {r7}, {r8, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8, r9}, {r7, r9}, {r8}, {}, {r7}, {r7}, {}, {}, {r7}, {}, {}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r7, r9}, {}, {}, {}, {r8}, {}, {}, {}, {r7}, {}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {r7}, {}, {}, {}, {0x0, r9}, {r7, r9}, {r8}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {r7}, {r8}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {r8}, {r7, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {0x0, r9}, {r8}, {}, {}, {r7}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {r8}, {r8, r9}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {r8}, {0x0, r9}, {}, {r8}, {r8}, {0x0, r4}, {}, {}, {}, {}, {0x0, r9}, {r7}, {}, {}, {0x0, r9}, {}, {r8, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {r7, r9}, {}, {}, {r8}, {r7}, {0x0, r9}, {}, {0x0, r9}, {r8}, {r8}, {r7}, {}, {0x0, r9}, {r8}], 0x1, "2156816c73038c"}) r10 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r10, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 451.225810][T29770] loop0: detected capacity change from 0 to 264192 [ 451.257760][T29774] loop3: detected capacity change from 0 to 264192 14:33:49 executing program 0: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), 0x0, 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) 14:33:49 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x8, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{0x0, r6}, {}, {r5}, {r5}, {r5}, {}, {}, {0x0, r6}, {}, {0x0, r1}, {}, {}, {r4, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {r5}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r4}, {}, {0x0, r6}, {r5}, {}, {}, {r5}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {r5, r6}, {}, {r2, r6}, {0x0, r6}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {r5}, {}, {0x0, r6}, {r4}, {r5, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {r4, r6}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {}, {}, {r5}, {}, {}, {0x0, r6}, {r4}, {}, {r5}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {r5}, {}, {}, {}, {r4}, {r4}, {}, {r4}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {}, {}, {r4}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r4}, {r5}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {r5}, {r5}, {0x0, r3}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {r4}, {}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {r4, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {r5}, {r4}, {}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {}, {r4, r6}], 0x1, "2156816c73038c"}) r7 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 451.345246][T29785] loop0: detected capacity change from 0 to 264192 [ 451.358485][ C1] scsi_io_completion_action: 11 callbacks suppressed [ 451.358529][ C1] sd 0:0:1:0: tag#502 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 451.363531][T29789] loop5: detected capacity change from 0 to 264192 [ 451.365302][ C1] sd 0:0:1:0: tag#502 CDB: opcode=0xe5 (vendor) [ 451.387728][ C1] sd 0:0:1:0: tag#502 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 451.397389][ C1] sd 0:0:1:0: tag#502 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 451.406347][ C1] sd 0:0:1:0: tag#502 CDB[20]: ba [ 451.443828][ C0] sd 0:0:1:0: tag#503 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 451.448882][T29796] loop2: detected capacity change from 0 to 264192 [ 451.453647][ C0] sd 0:0:1:0: tag#503 CDB: opcode=0xe5 (vendor) [ 451.466449][ C0] sd 0:0:1:0: tag#503 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 451.475466][ C0] sd 0:0:1:0: tag#503 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 451.484457][ C0] sd 0:0:1:0: tag#503 CDB[20]: ba 14:33:50 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:33:50 executing program 0: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) [ 451.564741][ C1] sd 0:0:1:0: tag#504 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 451.574557][ C1] sd 0:0:1:0: tag#504 CDB: opcode=0xe5 (vendor) [ 451.581258][ C1] sd 0:0:1:0: tag#504 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 451.590251][ C1] sd 0:0:1:0: tag#504 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 451.599228][ C1] sd 0:0:1:0: tag#504 CDB[20]: ba [ 451.657786][T29805] FAT-fs (loop0): bogus number of reserved sectors [ 451.664417][T29805] FAT-fs (loop0): Can't find a valid FAT filesystem 14:33:50 executing program 5: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r6, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r9}, {}, {r8}, {r8}, {r8}, {}, {}, {0x0, r9}, {}, {0x0, r2}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r8, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {r8}, {}, {0x0, r9}, {r8, r9}, {0x0, r9}, {r7}, {}, {0x0, r9}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {r7}, {}, {r8}, {r7}, {}, {r8, r9}, {}, {r3, r9}, {0x0, r9}, {}, {}, {r8}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {r8}, {}, {0x0, r9}, {r7}, {r8, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {r7}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8, r9}, {r7, r9}, {r8}, {}, {r7, r9}, {r7}, {0x0, r9}, {}, {r7}, {}, {}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {r7, r9}, {0x0, r9}, {r8, r9}, {r7, r9}, {0x0, r9}, {}, {}, {r8}, {}, {}, {0x0, r9}, {r7}, {}, {r8}, {}, {}, {r8}, {0x0, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {0x0, r9}, {}, {r7}, {}, {}, {}, {0x0, r9}, {r7, r9}, {r8}, {}, {}, {}, {r8}, {}, {}, {}, {r7}, {r7}, {}, {r7}, {r8}, {0x0, r9}, {r7}, {}, {r7}, {0x0, r9}, {r8}, {r7, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {0x0, r9}, {r8}, {}, {}, {r7}, {}, {0x0, r9}, {r8, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {0x0, r9}, {r7}, {r8}, {r8, r9}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {r8}, {0x0, r9}, {}, {r8}, {r8}, {0x0, r4}, {}, {}, {0x0, r9}, {}, {r7, r9}, {r7}, {}, {}, {0x0, r9}, {}, {r8, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {r8, r9}, {r8}, {r7, r9}, {}, {}, {r8}, {r7, r9}, {0x0, r9}, {}, {0x0, r9}, {r8}, {r8}, {r7}, {}, {r8, r9}, {r8}, {0x0, r9}, {}, {}, {}, {r7, r9}], 0x1, "2156816c73038c"}) r10 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r10, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:33:50 executing program 1: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x0, "0d4abfd4b32220"}) r9 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r9, 0xd000943d, &(0x7f0000054300)={0x0, [], 0x8, "7e6830ead6b793"}) r10 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r10, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000006, 0x100010, r11, 0x9472a000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x7, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)) r12 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r12, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:33:50 executing program 0: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) [ 451.761451][T29817] loop4: detected capacity change from 0 to 264192 [ 451.767598][T29818] loop3: detected capacity change from 0 to 264192 [ 451.836155][T29827] FAT-fs (loop0): bogus number of reserved sectors [ 451.842831][T29827] FAT-fs (loop0): Can't find a valid FAT filesystem [ 451.876179][ C1] sd 0:0:1:0: tag#505 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 451.885960][ C1] sd 0:0:1:0: tag#505 CDB: opcode=0xe5 (vendor) [ 451.892250][ C1] sd 0:0:1:0: tag#505 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 451.899799][T29836] loop5: detected capacity change from 0 to 264192 [ 451.901211][ C1] sd 0:0:1:0: tag#505 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 451.917071][ C1] sd 0:0:1:0: tag#505 CDB[20]: ba [ 451.957822][ C0] sd 0:0:1:0: tag#506 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 451.967617][ C0] sd 0:0:1:0: tag#506 CDB: opcode=0xe5 (vendor) [ 451.973901][ C0] sd 0:0:1:0: tag#506 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 451.982971][ C0] sd 0:0:1:0: tag#506 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 451.991953][ C0] sd 0:0:1:0: tag#506 CDB[20]: ba 14:33:50 executing program 2: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r6, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r9}, {}, {r8}, {r8}, {r8}, {}, {}, {0x0, r9}, {}, {0x0, r2}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r8, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {r8}, {}, {0x0, r9}, {r8, r9}, {0x0, r9}, {r7}, {}, {0x0, r9}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {r7}, {}, {r8}, {r7}, {}, {r8, r9}, {}, {r3, r9}, {0x0, r9}, {}, {}, {r8}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {r8}, {}, {0x0, r9}, {r7}, {r8, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8, r9}, {r7, r9}, {r8}, {}, {r7}, {r7}, {}, {}, {r7}, {}, {}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r7, r9}, {}, {}, {}, {r8}, {}, {}, {}, {r7}, {}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {r7}, {}, {}, {}, {0x0, r9}, {r7, r9}, {r8}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {r7}, {r8}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {r8}, {r7, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {0x0, r9}, {r8}, {}, {}, {r7}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {r8}, {r8, r9}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {r8}, {0x0, r9}, {}, {r8}, {r8}, {0x0, r4}, {}, {}, {}, {}, {0x0, r9}, {r7}, {}, {}, {0x0, r9}, {}, {r8, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {r7, r9}, {}, {}, {r8}, {r7}, {0x0, r9}, {}, {0x0, r9}, {r8}, {r8}, {r7}, {}, {0x0, r9}, {r8}], 0x1, "2156816c73038c"}) r10 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r10, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 452.031631][ C1] sd 0:0:1:0: tag#507 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 452.042295][ C1] sd 0:0:1:0: tag#507 CDB: opcode=0xe5 (vendor) [ 452.048574][ C1] sd 0:0:1:0: tag#507 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 452.057787][ C1] sd 0:0:1:0: tag#507 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 452.066762][ C1] sd 0:0:1:0: tag#507 CDB[20]: ba 14:33:50 executing program 0: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) [ 452.236284][T29857] loop2: detected capacity change from 0 to 264192 [ 452.248147][T29856] FAT-fs (loop0): bogus number of reserved sectors [ 452.254806][T29856] FAT-fs (loop0): Can't find a valid FAT filesystem [ 452.305805][ C0] sd 0:0:1:0: tag#508 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 452.315606][ C0] sd 0:0:1:0: tag#508 CDB: opcode=0xe5 (vendor) [ 452.321956][ C0] sd 0:0:1:0: tag#508 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 452.331167][ C0] sd 0:0:1:0: tag#508 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 452.340242][ C0] sd 0:0:1:0: tag#508 CDB[20]: ba 14:33:51 executing program 0: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[]) 14:33:51 executing program 0: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[]) 14:33:51 executing program 0: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[]) 14:33:51 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:33:51 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x8, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{0x0, r6}, {}, {r5}, {r5}, {r5}, {}, {}, {0x0, r6}, {}, {0x0, r1}, {}, {}, {r4, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {r5}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r4}, {}, {0x0, r6}, {r5}, {}, {}, {r5}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {r5, r6}, {}, {r2, r6}, {0x0, r6}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {r5}, {}, {0x0, r6}, {r4}, {r5, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {r4, r6}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {}, {}, {r5}, {}, {}, {0x0, r6}, {r4}, {}, {r5}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {r5}, {}, {}, {}, {r4}, {r4}, {}, {r4}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {}, {}, {r4}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r4}, {r5}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {r5}, {r5}, {0x0, r3}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {r4}, {}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {r4, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {r5}, {r4}, {}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {}, {r4, r6}], 0x1, "2156816c73038c"}) r7 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:33:51 executing program 2: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r6, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r9}, {}, {r8}, {r8}, {r8}, {}, {}, {0x0, r9}, {}, {0x0, r2}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r8, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {r8}, {}, {0x0, r9}, {r8, r9}, {0x0, r9}, {r7}, {}, {0x0, r9}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {r7}, {}, {r8}, {r7}, {}, {r8, r9}, {}, {r3, r9}, {0x0, r9}, {}, {}, {r8}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {r8}, {}, {0x0, r9}, {r7}, {r8, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8, r9}, {r7, r9}, {r8}, {}, {r7}, {r7}, {}, {}, {r7}, {}, {}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r7, r9}, {}, {}, {}, {r8}, {}, {}, {}, {r7}, {}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {r7}, {}, {}, {}, {0x0, r9}, {r7, r9}, {r8}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {r7}, {r8}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {r8}, {r7, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {0x0, r9}, {r8}, {}, {}, {r7}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {r8}, {r8, r9}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {r8}, {0x0, r9}, {}, {r8}, {r8}, {0x0, r4}, {}, {}, {}, {}, {0x0, r9}, {r7}, {}, {}, {0x0, r9}, {}, {r8, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {r7, r9}, {}, {}, {r8}, {r7}, {0x0, r9}, {}, {0x0, r9}, {r8}, {r8}, {r7}, {}, {0x0, r9}, {r8}], 0x1, "2156816c73038c"}) r10 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r10, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:33:51 executing program 0: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) [ 452.705382][T29883] loop0: detected capacity change from 0 to 264192 [ 452.739003][T29883] FAT-fs (loop0): bogus number of reserved sectors [ 452.745583][T29883] FAT-fs (loop0): Can't find a valid FAT filesystem 14:33:51 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 452.778115][T29888] loop3: detected capacity change from 0 to 264192 [ 452.809948][T29901] loop4: detected capacity change from 0 to 264192 [ 452.826886][T29899] loop2: detected capacity change from 0 to 264192 [ 452.839100][ C1] sd 0:0:1:0: tag#509 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 452.849062][ C1] sd 0:0:1:0: tag#509 CDB: opcode=0xe5 (vendor) [ 452.855336][ C1] sd 0:0:1:0: tag#509 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 452.864334][ C1] sd 0:0:1:0: tag#509 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 452.873394][ C1] sd 0:0:1:0: tag#509 CDB[20]: ba 14:33:51 executing program 1: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r6, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r9}, {}, {r8}, {r8}, {r8}, {}, {}, {0x0, r9}, {}, {0x0, r2}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r8, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {r8}, {}, {0x0, r9}, {r8, r9}, {0x0, r9}, {r7}, {}, {0x0, r9}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {r7}, {}, {r8}, {r7}, {}, {r8, r9}, {}, {r3, r9}, {0x0, r9}, {}, {}, {r8}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {r8}, {}, {0x0, r9}, {r7}, {r8, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {r7}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8, r9}, {r7, r9}, {r8}, {}, {r7, r9}, {r7}, {0x0, r9}, {}, {r7}, {}, {}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {r7, r9}, {0x0, r9}, {r8, r9}, {r7, r9}, {0x0, r9}, {}, {}, {r8}, {}, {}, {0x0, r9}, {r7}, {}, {r8}, {}, {}, {r8}, {0x0, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {0x0, r9}, {}, {r7}, {}, {}, {}, {0x0, r9}, {r7, r9}, {r8}, {}, {}, {}, {r8}, {}, {}, {}, {r7}, {r7}, {}, {r7}, {r8}, {0x0, r9}, {r7}, {}, {r7}, {0x0, r9}, {r8}, {r7, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {0x0, r9}, {r8}, {}, {}, {r7}, {}, {0x0, r9}, {r8, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {0x0, r9}, {r7}, {r8}, {r8, r9}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {r8}, {0x0, r9}, {}, {r8}, {r8}, {0x0, r4}, {}, {}, {0x0, r9}, {}, {r7, r9}, {r7}, {}, {}, {0x0, r9}, {}, {r8, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {r8, r9}, {r8}, {r7, r9}, {}, {}, {r8}, {r7, r9}, {0x0, r9}, {}, {0x0, r9}, {r8}, {r8}, {r7}, {}, {r8, r9}, {r8}, {0x0, r9}, {}, {}, {}, {r7, r9}], 0x1, "2156816c73038c"}) r10 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r10, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 452.890295][T29914] loop5: detected capacity change from 0 to 264192 [ 452.949986][ C0] sd 0:0:1:0: tag#511 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 452.955296][ C1] sd 0:0:1:0: tag#510 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 452.959774][ C0] sd 0:0:1:0: tag#511 CDB: opcode=0xe5 (vendor) [ 452.969696][ C1] sd 0:0:1:0: tag#510 CDB: opcode=0xe5 (vendor) [ 452.975913][ C0] sd 0:0:1:0: tag#511 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 452.982254][ C1] sd 0:0:1:0: tag#510 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 452.991724][ C0] sd 0:0:1:0: tag#511 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 453.000687][ C1] sd 0:0:1:0: tag#510 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 453.009645][ C0] sd 0:0:1:0: tag#511 CDB[20]: ba [ 453.018707][ C1] sd 0:0:1:0: tag#510 CDB[20]: ba 14:33:51 executing program 0: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) 14:33:51 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, 0xffffffffffffffff, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:33:52 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x8, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{0x0, r6}, {}, {r5}, {r5}, {r5}, {}, {}, {0x0, r6}, {}, {0x0, r1}, {}, {}, {r4, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {r5}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r4}, {}, {0x0, r6}, {r5}, {}, {}, {r5}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {r5, r6}, {}, {r2, r6}, {0x0, r6}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {r5}, {}, {0x0, r6}, {r4}, {r5, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {r4, r6}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {}, {}, {r5}, {}, {}, {0x0, r6}, {r4}, {}, {r5}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {r5}, {}, {}, {}, {r4}, {r4}, {}, {r4}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {}, {}, {r4}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r4}, {r5}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {r5}, {r5}, {0x0, r3}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {r4}, {}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {r4, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {r5}, {r4}, {}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {}, {r4, r6}], 0x1, "2156816c73038c"}) r7 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 453.370935][T29933] loop0: detected capacity change from 0 to 264192 [ 453.432392][T29933] FAT-fs (loop0): bogus number of reserved sectors [ 453.439051][T29933] FAT-fs (loop0): Can't find a valid FAT filesystem [ 453.472330][T29940] loop3: detected capacity change from 0 to 264192 14:33:52 executing program 0: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) [ 453.549784][T29947] loop4: detected capacity change from 0 to 264192 [ 453.598822][T29954] loop0: detected capacity change from 0 to 264192 14:33:52 executing program 2: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r6, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r9}, {}, {r8}, {r8}, {r8}, {}, {}, {0x0, r9}, {}, {0x0, r2}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r8, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {r8}, {}, {0x0, r9}, {r8, r9}, {0x0, r9}, {r7}, {}, {0x0, r9}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {r7}, {}, {r8}, {r7}, {}, {r8, r9}, {}, {r3, r9}, {0x0, r9}, {}, {}, {r8}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {r8}, {}, {0x0, r9}, {r7}, {r8, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8, r9}, {r7, r9}, {r8}, {}, {r7}, {r7}, {}, {}, {r7}, {}, {}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r7, r9}, {}, {}, {}, {r8}, {}, {}, {}, {r7}, {}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {r7}, {}, {}, {}, {0x0, r9}, {r7, r9}, {r8}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {r7}, {r8}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {r8}, {r7, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {0x0, r9}, {r8}, {}, {}, {r7}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {r8}, {r8, r9}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {r8}, {0x0, r9}, {}, {r8}, {r8}, {0x0, r4}, {}, {}, {}, {}, {0x0, r9}, {r7}, {}, {}, {0x0, r9}, {}, {r8, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {r7, r9}, {}, {}, {r8}, {r7}, {0x0, r9}, {}, {0x0, r9}, {r8}, {r8}, {r7}, {}, {0x0, r9}, {r8}], 0x1, "2156816c73038c"}) r10 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r10, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 453.649266][T29954] FAT-fs (loop0): bogus number of reserved sectors [ 453.655818][T29954] FAT-fs (loop0): Can't find a valid FAT filesystem 14:33:52 executing program 0: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{0x0}], 0x0, &(0x7f00000004c0)=ANY=[]) 14:33:52 executing program 5: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r6, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r9}, {}, {r8}, {r8}, {r8}, {}, {}, {0x0, r9}, {}, {0x0, r2}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r8, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {r8}, {}, {0x0, r9}, {r8, r9}, {0x0, r9}, {r7}, {}, {0x0, r9}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {r7}, {}, {r8}, {r7}, {}, {r8, r9}, {}, {r3, r9}, {0x0, r9}, {}, {}, {r8}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {r8}, {}, {0x0, r9}, {r7}, {r8, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8, r9}, {r7, r9}, {r8}, {}, {r7}, {r7}, {}, {}, {r7}, {}, {}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r7, r9}, {}, {}, {}, {r8}, {}, {}, {}, {r7}, {}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {r7}, {}, {}, {}, {0x0, r9}, {r7, r9}, {r8}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {r7}, {r8}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {r8}, {r7, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {0x0, r9}, {r8}, {}, {}, {r7}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {r8}, {r8, r9}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {r8}, {0x0, r9}, {}, {r8}, {r8}, {0x0, r4}, {}, {}, {}, {}, {0x0, r9}, {r7}, {}, {}, {0x0, r9}, {}, {r8, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {r7, r9}, {}, {}, {r8}, {r7}, {0x0, r9}, {}, {0x0, r9}, {r8}, {r8}, {r7}, {}, {0x0, r9}, {r8}], 0x1, "2156816c73038c"}) r10 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r10, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:33:52 executing program 1: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r6, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r9}, {}, {r8}, {r8}, {r8}, {}, {}, {0x0, r9}, {}, {0x0, r2}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r8, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {r8}, {}, {0x0, r9}, {r8, r9}, {0x0, r9}, {r7}, {}, {0x0, r9}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {r7}, {}, {r8}, {r7}, {}, {r8, r9}, {}, {r3, r9}, {0x0, r9}, {}, {}, {r8}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {r8}, {}, {0x0, r9}, {r7}, {r8, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {r7}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8, r9}, {r7, r9}, {r8}, {}, {r7, r9}, {r7}, {0x0, r9}, {}, {r7}, {}, {}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {r7, r9}, {0x0, r9}, {r8, r9}, {r7, r9}, {0x0, r9}, {}, {}, {r8}, {}, {}, {0x0, r9}, {r7}, {}, {r8}, {}, {}, {r8}, {0x0, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {0x0, r9}, {}, {r7}, {}, {}, {}, {0x0, r9}, {r7, r9}, {r8}, {}, {}, {}, {r8}, {}, {}, {}, {r7}, {r7}, {}, {r7}, {r8}, {0x0, r9}, {r7}, {}, {r7}, {0x0, r9}, {r8}, {r7, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {0x0, r9}, {r8}, {}, {}, {r7}, {}, {0x0, r9}, {r8, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {0x0, r9}, {r7}, {r8}, {r8, r9}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {r8}, {0x0, r9}, {}, {r8}, {r8}, {0x0, r4}, {}, {}, {0x0, r9}, {}, {r7, r9}, {r7}, {}, {}, {0x0, r9}, {}, {r8, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {r8, r9}, {r8}, {r7, r9}, {}, {}, {r8}, {r7, r9}, {0x0, r9}, {}, {0x0, r9}, {r8}, {r8}, {r7}, {}, {r8, r9}, {r8}, {0x0, r9}, {}, {}, {}, {r7, r9}], 0x1, "2156816c73038c"}) r10 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r10, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 453.809690][T29968] loop0: detected capacity change from 0 to 264192 [ 453.824515][T29971] loop2: detected capacity change from 0 to 264192 [ 453.836313][T29968] FAT-fs (loop0): bogus number of reserved sectors [ 453.842921][T29968] FAT-fs (loop0): Can't find a valid FAT filesystem 14:33:52 executing program 0: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{0x0}], 0x0, &(0x7f00000004c0)=ANY=[]) 14:33:52 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x8, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{0x0, r6}, {}, {r5}, {r5}, {r5}, {}, {}, {0x0, r6}, {}, {0x0, r1}, {}, {}, {r4, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {r5}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r4}, {}, {0x0, r6}, {r5}, {}, {}, {r5}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {r5, r6}, {}, {r2, r6}, {0x0, r6}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {r5}, {}, {0x0, r6}, {r4}, {r5, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {r4, r6}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {}, {}, {r5}, {}, {}, {0x0, r6}, {r4}, {}, {r5}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {r5}, {}, {}, {}, {r4}, {r4}, {}, {r4}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {}, {}, {r4}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r4}, {r5}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {r5}, {r5}, {0x0, r3}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {r4}, {}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {r4, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {r5}, {r4}, {}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {}, {r4, r6}], 0x1, "2156816c73038c"}) r7 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 454.000361][T29991] loop5: detected capacity change from 0 to 264192 [ 454.011870][T29994] loop0: detected capacity change from 0 to 264192 14:33:52 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, 0xffffffffffffffff, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 454.059569][T29994] FAT-fs (loop0): bogus number of reserved sectors [ 454.066108][T29994] FAT-fs (loop0): Can't find a valid FAT filesystem 14:33:52 executing program 0: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{0x0}], 0x0, &(0x7f00000004c0)=ANY=[]) [ 454.199704][T30010] loop0: detected capacity change from 0 to 264192 [ 454.209442][T30012] loop4: detected capacity change from 0 to 264192 [ 454.235532][T30010] FAT-fs (loop0): bogus number of reserved sectors [ 454.242119][T30010] FAT-fs (loop0): Can't find a valid FAT filesystem 14:33:52 executing program 0: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)}], 0x0, &(0x7f00000004c0)=ANY=[]) [ 454.311390][T30021] loop3: detected capacity change from 0 to 264192 14:33:53 executing program 2: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r6, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r9}, {}, {r8}, {r8}, {r8}, {}, {}, {0x0, r9}, {}, {0x0, r2}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r8, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {r8}, {}, {0x0, r9}, {r8, r9}, {0x0, r9}, {r7}, {}, {0x0, r9}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {r7}, {}, {r8}, {r7}, {}, {r8, r9}, {}, {r3, r9}, {0x0, r9}, {}, {}, {r8}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {r8}, {}, {0x0, r9}, {r7}, {r8, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8, r9}, {r7, r9}, {r8}, {}, {r7}, {r7}, {}, {}, {r7}, {}, {}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r7, r9}, {}, {}, {}, {r8}, {}, {}, {}, {r7}, {}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {r7}, {}, {}, {}, {0x0, r9}, {r7, r9}, {r8}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {r7}, {r8}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {r8}, {r7, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {0x0, r9}, {r8}, {}, {}, {r7}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {r8}, {r8, r9}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {r8}, {0x0, r9}, {}, {r8}, {r8}, {0x0, r4}, {}, {}, {}, {}, {0x0, r9}, {r7}, {}, {}, {0x0, r9}, {}, {r8, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {r7, r9}, {}, {}, {r8}, {r7}, {0x0, r9}, {}, {0x0, r9}, {r8}, {r8}, {r7}, {}, {0x0, r9}, {r8}], 0x1, "2156816c73038c"}) r10 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r10, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 454.406125][T30029] loop0: detected capacity change from 0 to 264192 [ 454.448701][T30029] FAT-fs (loop0): bogus number of reserved sectors [ 454.455247][T30029] FAT-fs (loop0): Can't find a valid FAT filesystem 14:33:53 executing program 0: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)}], 0x0, &(0x7f00000004c0)=ANY=[]) [ 454.584776][T30040] loop0: detected capacity change from 0 to 264192 [ 454.608773][T30044] loop2: detected capacity change from 0 to 264192 [ 454.617410][T30040] FAT-fs (loop0): bogus number of reserved sectors [ 454.623992][T30040] FAT-fs (loop0): Can't find a valid FAT filesystem 14:33:53 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x8, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{0x0, r6}, {}, {r5}, {r5}, {r5}, {}, {}, {0x0, r6}, {}, {0x0, r1}, {}, {}, {r4, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {r5}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r4}, {}, {0x0, r6}, {r5}, {}, {}, {r5}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {r5, r6}, {}, {r2, r6}, {0x0, r6}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {r5}, {}, {0x0, r6}, {r4}, {r5, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {r4, r6}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {}, {}, {r5}, {}, {}, {0x0, r6}, {r4}, {}, {r5}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {r5}, {}, {}, {}, {r4}, {r4}, {}, {r4}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {}, {}, {r4}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r4}, {r5}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {r5}, {r5}, {0x0, r3}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {r4}, {}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {r4, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {r5}, {r4}, {}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {}, {r4, r6}], 0x1, "2156816c73038c"}) r7 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:33:53 executing program 0: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)}], 0x0, &(0x7f00000004c0)=ANY=[]) 14:33:53 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, 0xffffffffffffffff, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:33:53 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x8, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{0x0, r6}, {}, {r5}, {r5}, {r5}, {}, {}, {0x0, r6}, {}, {0x0, r1}, {}, {}, {r4, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {r5}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r4}, {}, {0x0, r6}, {r5}, {}, {}, {r5}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {r5, r6}, {}, {r2, r6}, {0x0, r6}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {r5}, {}, {0x0, r6}, {r4}, {r5, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {r4, r6}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {}, {}, {r5}, {}, {}, {0x0, r6}, {r4}, {}, {r5}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {r5}, {}, {}, {}, {r4}, {r4}, {}, {r4}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {}, {}, {r4}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r4}, {r5}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {r5}, {r5}, {0x0, r3}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {r4}, {}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {r4, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {r5}, {r4}, {}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {}, {r4, r6}], 0x1, "2156816c73038c"}) r7 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 454.791100][T30054] loop0: detected capacity change from 0 to 264192 [ 454.830036][T30054] FAT-fs (loop0): bogus number of reserved sectors 14:33:53 executing program 1: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r6, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r9}, {}, {r8}, {r8}, {r8}, {}, {}, {0x0, r9}, {}, {0x0, r2}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r8, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {r8}, {}, {0x0, r9}, {r8, r9}, {0x0, r9}, {r7}, {}, {0x0, r9}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {r7}, {}, {r8}, {r7}, {}, {r8, r9}, {}, {r3, r9}, {0x0, r9}, {}, {}, {r8}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {r8}, {}, {0x0, r9}, {r7}, {r8, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {r7}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8, r9}, {r7, r9}, {r8}, {}, {r7, r9}, {r7}, {0x0, r9}, {}, {r7}, {}, {}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {r7, r9}, {0x0, r9}, {r8, r9}, {r7, r9}, {0x0, r9}, {}, {}, {r8}, {}, {}, {0x0, r9}, {r7}, {}, {r8}, {}, {}, {r8}, {0x0, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {0x0, r9}, {}, {r7}, {}, {}, {}, {0x0, r9}, {r7, r9}, {r8}, {}, {}, {}, {r8}, {}, {}, {}, {r7}, {r7}, {}, {r7}, {r8}, {0x0, r9}, {r7}, {}, {r7}, {0x0, r9}, {r8}, {r7, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {0x0, r9}, {r8}, {}, {}, {r7}, {}, {0x0, r9}, {r8, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {0x0, r9}, {r7}, {r8}, {r8, r9}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {r8}, {0x0, r9}, {}, {r8}, {r8}, {0x0, r4}, {}, {}, {0x0, r9}, {}, {r7, r9}, {r7}, {}, {}, {0x0, r9}, {}, {r8, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {r8, r9}, {r8}, {r7, r9}, {}, {}, {r8}, {r7, r9}, {0x0, r9}, {}, {0x0, r9}, {r8}, {r8}, {r7}, {}, {r8, r9}, {r8}, {0x0, r9}, {}, {}, {}, {r7, r9}], 0x1, "2156816c73038c"}) r10 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r10, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 454.836586][T30054] FAT-fs (loop0): Can't find a valid FAT filesystem [ 454.847390][T30061] loop5: detected capacity change from 0 to 264192 14:33:53 executing program 0: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400", 0xc}], 0x0, &(0x7f00000004c0)=ANY=[]) [ 454.962680][T30077] loop3: detected capacity change from 0 to 264192 [ 454.973088][T30078] loop4: detected capacity change from 0 to 264192 [ 454.992748][T30083] loop0: detected capacity change from 0 to 264192 [ 455.057175][T30083] FAT-fs (loop0): bogus number of reserved sectors [ 455.063914][T30083] FAT-fs (loop0): Can't find a valid FAT filesystem 14:33:53 executing program 2: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r6, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r9}, {}, {r8}, {r8}, {r8}, {}, {}, {0x0, r9}, {}, {0x0, r2}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r8, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {r8}, {}, {0x0, r9}, {r8, r9}, {0x0, r9}, {r7}, {}, {0x0, r9}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {r7}, {}, {r8}, {r7}, {}, {r8, r9}, {}, {r3, r9}, {0x0, r9}, {}, {}, {r8}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {r8}, {}, {0x0, r9}, {r7}, {r8, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8, r9}, {r7, r9}, {r8}, {}, {r7}, {r7}, {}, {}, {r7}, {}, {}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r7, r9}, {}, {}, {}, {r8}, {}, {}, {}, {r7}, {}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {r7}, {}, {}, {}, {0x0, r9}, {r7, r9}, {r8}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {r7}, {r8}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {r8}, {r7, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {0x0, r9}, {r8}, {}, {}, {r7}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {r8}, {r8, r9}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {r8}, {0x0, r9}, {}, {r8}, {r8}, {0x0, r4}, {}, {}, {}, {}, {0x0, r9}, {r7}, {}, {}, {0x0, r9}, {}, {r8, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {r7, r9}, {}, {}, {r8}, {r7}, {0x0, r9}, {}, {0x0, r9}, {r8}, {r8}, {r7}, {}, {0x0, r9}, {r8}], 0x1, "2156816c73038c"}) r10 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r10, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:33:53 executing program 0: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400", 0xc}], 0x0, &(0x7f00000004c0)=ANY=[]) [ 455.230222][T30100] loop0: detected capacity change from 0 to 264192 [ 455.264269][T30100] FAT-fs (loop0): bogus number of reserved sectors [ 455.270855][T30100] FAT-fs (loop0): Can't find a valid FAT filesystem 14:33:53 executing program 0: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400", 0xc}], 0x0, &(0x7f00000004c0)=ANY=[]) [ 455.312060][T30107] loop2: detected capacity change from 0 to 264192 [ 455.382887][T30113] loop0: detected capacity change from 0 to 264192 14:33:54 executing program 5: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r6, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r9}, {}, {r8}, {r8}, {r8}, {}, {}, {0x0, r9}, {}, {0x0, r2}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r8, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {r8}, {}, {0x0, r9}, {r8, r9}, {0x0, r9}, {r7}, {}, {0x0, r9}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {r7}, {}, {r8}, {r7}, {}, {r8, r9}, {}, {r3, r9}, {0x0, r9}, {}, {}, {r8}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {r8}, {}, {0x0, r9}, {r7}, {r8, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {r7}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8, r9}, {r7, r9}, {r8}, {}, {r7, r9}, {r7}, {0x0, r9}, {}, {r7}, {}, {}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {r7, r9}, {0x0, r9}, {r8, r9}, {r7, r9}, {0x0, r9}, {}, {}, {r8}, {}, {}, {0x0, r9}, {r7}, {}, {r8}, {}, {}, {r8}, {0x0, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {0x0, r9}, {}, {r7}, {}, {}, {}, {0x0, r9}, {r7, r9}, {r8}, {}, {}, {}, {r8}, {}, {}, {}, {r7}, {r7}, {}, {r7}, {r8}, {0x0, r9}, {r7}, {}, {r7}, {0x0, r9}, {r8}, {r7, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {0x0, r9}, {r8}, {}, {}, {r7}, {}, {0x0, r9}, {r8, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {0x0, r9}, {r7}, {r8}, {r8, r9}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {r8}, {0x0, r9}, {}, {r8}, {r8}, {0x0, r4}, {}, {}, {0x0, r9}, {}, {r7, r9}, {r7}, {}, {}, {0x0, r9}, {}, {r8, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {r8, r9}, {r8}, {r7, r9}, {}, {}, {r8}, {r7, r9}, {0x0, r9}, {}, {0x0, r9}, {r8}, {r8}, {r7}, {}, {r8, r9}, {r8}, {0x0, r9}, {}, {}, {}, {r7, r9}], 0x1, "2156816c73038c"}) r10 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r10, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 455.437747][T30113] FAT-fs (loop0): bogus number of reserved sectors [ 455.444421][T30113] FAT-fs (loop0): Can't find a valid FAT filesystem 14:33:54 executing program 0: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200", 0x12}], 0x0, &(0x7f00000004c0)=ANY=[]) 14:33:54 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x8, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{0x0, r6}, {}, {r5}, {r5}, {r5}, {}, {}, {0x0, r6}, {}, {0x0, r1}, {}, {}, {r4, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {r5}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r4}, {}, {0x0, r6}, {r5}, {}, {}, {r5}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {r5, r6}, {}, {r2, r6}, {0x0, r6}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {r5}, {}, {0x0, r6}, {r4}, {r5, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {r4, r6}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {}, {}, {r5}, {}, {}, {0x0, r6}, {r4}, {}, {r5}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {r5}, {}, {}, {}, {r4}, {r4}, {}, {r4}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {}, {}, {r4}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r4}, {r5}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {r5}, {r5}, {0x0, r3}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {r4}, {}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {r4, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {r5}, {r4}, {}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {}, {r4, r6}], 0x1, "2156816c73038c"}) r7 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:33:54 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r1, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 455.554892][T30121] loop0: detected capacity change from 0 to 264192 [ 455.577809][T30121] FAT-fs (loop0): invalid media value (0x00) [ 455.583901][T30121] FAT-fs (loop0): Can't find a valid FAT filesystem 14:33:54 executing program 0: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200", 0x12}], 0x0, &(0x7f00000004c0)=ANY=[]) [ 455.642366][T30128] loop5: detected capacity change from 0 to 264192 [ 455.711323][T30141] loop0: detected capacity change from 0 to 264192 [ 455.728885][T30142] loop3: detected capacity change from 0 to 264192 [ 455.744394][T30146] loop4: detected capacity change from 0 to 264192 14:33:54 executing program 2: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r6, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r9}, {}, {r8}, {r8}, {r8}, {}, {}, {0x0, r9}, {}, {0x0, r2}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r8, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {r8}, {}, {0x0, r9}, {r8, r9}, {0x0, r9}, {r7}, {}, {0x0, r9}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {r7}, {}, {r8}, {r7}, {}, {r8, r9}, {}, {r3, r9}, {0x0, r9}, {}, {}, {r8}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {r8}, {}, {0x0, r9}, {r7}, {r8, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8, r9}, {r7, r9}, {r8}, {}, {r7}, {r7}, {}, {}, {r7}, {}, {}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r7, r9}, {}, {}, {}, {r8}, {}, {}, {}, {r7}, {}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {r7}, {}, {}, {}, {0x0, r9}, {r7, r9}, {r8}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {r7}, {r8}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {r8}, {r7, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {0x0, r9}, {r8}, {}, {}, {r7}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {r8}, {r8, r9}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {r8}, {0x0, r9}, {}, {r8}, {r8}, {0x0, r4}, {}, {}, {}, {}, {0x0, r9}, {r7}, {}, {}, {0x0, r9}, {}, {r8, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {r7, r9}, {}, {}, {r8}, {r7}, {0x0, r9}, {}, {0x0, r9}, {r8}, {r8}, {r7}, {}, {0x0, r9}, {r8}], 0x1, "2156816c73038c"}) r10 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r10, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 455.771258][T30141] FAT-fs (loop0): invalid media value (0x00) [ 455.777282][T30141] FAT-fs (loop0): Can't find a valid FAT filesystem 14:33:54 executing program 1: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x0, "0d4abfd4b32220"}) r9 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r9, 0xd000943d, &(0x7f0000054300)={0x0, [], 0x8, "7e6830ead6b793"}) r10 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r10, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000006, 0x100010, r11, 0x9472a000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x7, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)) r12 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r12, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:33:54 executing program 0: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200", 0x12}], 0x0, &(0x7f00000004c0)=ANY=[]) [ 455.968125][T30166] loop0: detected capacity change from 0 to 264192 [ 455.979272][T30168] loop2: detected capacity change from 0 to 264192 [ 455.998082][T30166] FAT-fs (loop0): invalid media value (0x00) [ 456.004247][T30166] FAT-fs (loop0): Can't find a valid FAT filesystem 14:33:54 executing program 0: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400", 0x15}], 0x0, &(0x7f00000004c0)=ANY=[]) [ 456.120673][T30179] loop0: detected capacity change from 0 to 264192 [ 456.155699][T30179] FAT-fs (loop0): invalid media value (0x00) [ 456.161742][T30179] FAT-fs (loop0): Can't find a valid FAT filesystem 14:33:54 executing program 0: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400", 0x15}], 0x0, &(0x7f00000004c0)=ANY=[]) 14:33:54 executing program 5: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400", 0x15}], 0x0, &(0x7f00000004c0)=ANY=[]) [ 456.272228][T30187] loop0: detected capacity change from 0 to 264192 [ 456.297010][T30187] FAT-fs (loop0): invalid media value (0x00) [ 456.303162][T30187] FAT-fs (loop0): Can't find a valid FAT filesystem 14:33:54 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r1, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:33:54 executing program 0: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400", 0x15}], 0x0, &(0x7f00000004c0)=ANY=[]) [ 456.363620][T30194] loop5: detected capacity change from 0 to 264192 [ 456.417632][T30194] FAT-fs (loop5): invalid media value (0x00) [ 456.423683][T30194] FAT-fs (loop5): Can't find a valid FAT filesystem 14:33:55 executing program 5: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = fsopen(0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000006, 0x100010, r6, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r9}, {}, {r8}, {r8}, {r8}, {}, {}, {0x0, r9}, {}, {0x0, r2}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r8, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {r8}, {}, {0x0, r9}, {r8, r9}, {0x0, r9}, {r7}, {}, {0x0, r9}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {r7}, {}, {r8}, {r7}, {}, {r8, r9}, {}, {r3, r9}, {0x0, r9}, {}, {}, {r8}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {r8}, {}, {0x0, r9}, {r7}, {r8, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {r7}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8, r9}, {r7, r9}, {r8}, {}, {r7, r9}, {r7}, {0x0, r9}, {}, {r7}, {}, {}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {r7, r9}, {0x0, r9}, {r8, r9}, {r7, r9}, {0x0, r9}, {}, {}, {r8}, {}, {}, {0x0, r9}, {r7}, {}, {r8}, {}, {}, {r8}, {0x0, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {0x0, r9}, {}, {r7}, {}, {}, {}, {0x0, r9}, {r7, r9}, {r8}, {}, {}, {}, {r8}, {}, {}, {}, {r7}, {r7}, {}, {r7}, {r8}, {0x0, r9}, {r7}, {}, {r7}, {0x0, r9}, {r8}, {r7, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {0x0, r9}, {r8}, {}, {}, {r7}, {}, {0x0, r9}, {r8, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {0x0, r9}, {r7}, {r8}, {r8, r9}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {r8}, {0x0, r9}, {}, {r8}, {r8}, {0x0, r4}, {}, {}, {0x0, r9}, {}, {r7, r9}, {r7}, {}, {}, {0x0, r9}, {}, {r8, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {r8, r9}, {r8}, {r7, r9}, {}, {}, {r8}, {r7, r9}, {0x0, r9}, {}, {0x0, r9}, {r8}, {r8}, {r7}, {}, {r8, r9}, {r8}, {0x0, r9}, {}, {}, {}, {r7, r9}], 0x1, "2156816c73038c"}) r10 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r10, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 456.463854][T30201] loop0: detected capacity change from 0 to 264192 [ 456.500958][T30201] FAT-fs (loop0): invalid media value (0x00) [ 456.506995][T30201] FAT-fs (loop0): Can't find a valid FAT filesystem [ 456.549266][T30208] loop3: detected capacity change from 0 to 264192 14:33:55 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x8, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{0x0, r6}, {}, {r5}, {r5}, {r5}, {}, {}, {0x0, r6}, {}, {0x0, r1}, {}, {}, {r4, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {r5}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r4}, {}, {0x0, r6}, {r5}, {}, {}, {r5}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {r5, r6}, {}, {r2, r6}, {0x0, r6}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {r5}, {}, {0x0, r6}, {r4}, {r5, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {r4, r6}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {}, {}, {r5}, {}, {}, {0x0, r6}, {r4}, {}, {r5}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {r5}, {}, {}, {}, {r4}, {r4}, {}, {r4}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {}, {}, {r4}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r4}, {r5}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {r5}, {r5}, {0x0, r3}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {r4}, {}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {r4, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {r5}, {r4}, {}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {}, {r4, r6}], 0x1, "2156816c73038c"}) r7 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:33:55 executing program 0: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f8", 0x16}], 0x0, &(0x7f00000004c0)=ANY=[]) 14:33:55 executing program 2: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r6, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r9}, {}, {r8}, {r8}, {r8}, {}, {}, {0x0, r9}, {}, {0x0, r2}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r8, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {r8}, {}, {0x0, r9}, {r8, r9}, {0x0, r9}, {r7}, {}, {0x0, r9}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {r7}, {}, {r8}, {r7}, {}, {r8, r9}, {}, {r3, r9}, {0x0, r9}, {}, {}, {r8}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {r8}, {}, {0x0, r9}, {r7}, {r8, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8, r9}, {r7, r9}, {r8}, {}, {r7}, {r7}, {}, {}, {r7}, {}, {}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r7, r9}, {}, {}, {}, {r8}, {}, {}, {}, {r7}, {}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {r7}, {}, {}, {}, {0x0, r9}, {r7, r9}, {r8}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {r7}, {r8}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {r8}, {r7, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {0x0, r9}, {r8}, {}, {}, {r7}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {r8}, {r8, r9}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {r8}, {0x0, r9}, {}, {r8}, {r8}, {0x0, r4}, {}, {}, {}, {}, {0x0, r9}, {r7}, {}, {}, {0x0, r9}, {}, {r8, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {r7, r9}, {}, {}, {r8}, {r7}, {0x0, r9}, {}, {0x0, r9}, {r8}, {r8}, {r7}, {}, {0x0, r9}, {r8}], 0x1, "2156816c73038c"}) r10 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r10, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 456.601138][T30217] loop5: detected capacity change from 0 to 264192 [ 456.654544][ C1] scsi_io_completion_action: 13 callbacks suppressed [ 456.654569][ C1] sd 0:0:1:0: tag#461 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 456.671131][ C1] sd 0:0:1:0: tag#461 CDB: opcode=0xe5 (vendor) [ 456.677377][ C1] sd 0:0:1:0: tag#461 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 456.686386][ C1] sd 0:0:1:0: tag#461 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 456.695346][ C1] sd 0:0:1:0: tag#461 CDB[20]: ba [ 456.715592][T30224] loop0: detected capacity change from 0 to 264192 14:33:55 executing program 0: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f8", 0x16}], 0x0, &(0x7f00000004c0)=ANY=[]) [ 456.770241][T30224] FAT-fs (loop0): bogus number of FAT sectors [ 456.776440][T30224] FAT-fs (loop0): Can't find a valid FAT filesystem [ 456.862861][T30238] loop4: detected capacity change from 0 to 264192 [ 456.868881][T30237] loop2: detected capacity change from 0 to 264192 [ 456.871264][T30234] loop0: detected capacity change from 0 to 264192 [ 456.907106][T30234] FAT-fs (loop0): bogus number of FAT sectors [ 456.913250][T30234] FAT-fs (loop0): Can't find a valid FAT filesystem [ 456.940399][ C0] sd 0:0:1:0: tag#462 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 456.950182][ C0] sd 0:0:1:0: tag#462 CDB: opcode=0xe5 (vendor) 14:33:55 executing program 1: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x0, "0d4abfd4b32220"}) r9 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r9, 0xd000943d, &(0x7f0000054300)={0x0, [], 0x8, "7e6830ead6b793"}) r10 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r10, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000006, 0x100010, r11, 0x9472a000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x7, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)) r12 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r12, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:33:55 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r1, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 456.956515][ C0] sd 0:0:1:0: tag#462 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 456.965481][ C0] sd 0:0:1:0: tag#462 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 456.974535][ C0] sd 0:0:1:0: tag#462 CDB[20]: ba 14:33:55 executing program 0: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f8", 0x16}], 0x0, &(0x7f00000004c0)=ANY=[]) [ 457.060649][ C0] sd 0:0:1:0: tag#463 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 457.070542][ C0] sd 0:0:1:0: tag#463 CDB: opcode=0xe5 (vendor) [ 457.076787][ C0] sd 0:0:1:0: tag#463 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 457.085761][ C0] sd 0:0:1:0: tag#463 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 457.095516][ C0] sd 0:0:1:0: tag#463 CDB[20]: ba 14:33:55 executing program 5: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = fsopen(0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000006, 0x100010, r6, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r9}, {}, {r8}, {r8}, {r8}, {}, {}, {0x0, r9}, {}, {0x0, r2}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r8, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {r8}, {}, {0x0, r9}, {r8, r9}, {0x0, r9}, {r7}, {}, {0x0, r9}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {r7}, {}, {r8}, {r7}, {}, {r8, r9}, {}, {r3, r9}, {0x0, r9}, {}, {}, {r8}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {r8}, {}, {0x0, r9}, {r7}, {r8, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {r7}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8, r9}, {r7, r9}, {r8}, {}, {r7, r9}, {r7}, {0x0, r9}, {}, {r7}, {}, {}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {r7, r9}, {0x0, r9}, {r8, r9}, {r7, r9}, {0x0, r9}, {}, {}, {r8}, {}, {}, {0x0, r9}, {r7}, {}, {r8}, {}, {}, {r8}, {0x0, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {0x0, r9}, {}, {r7}, {}, {}, {}, {0x0, r9}, {r7, r9}, {r8}, {}, {}, {}, {r8}, {}, {}, {}, {r7}, {r7}, {}, {r7}, {r8}, {0x0, r9}, {r7}, {}, {r7}, {0x0, r9}, {r8}, {r7, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {0x0, r9}, {r8}, {}, {}, {r7}, {}, {0x0, r9}, {r8, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {0x0, r9}, {r7}, {r8}, {r8, r9}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {r8}, {0x0, r9}, {}, {r8}, {r8}, {0x0, r4}, {}, {}, {0x0, r9}, {}, {r7, r9}, {r7}, {}, {}, {0x0, r9}, {}, {r8, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {r8, r9}, {r8}, {r7, r9}, {}, {}, {r8}, {r7, r9}, {0x0, r9}, {}, {0x0, r9}, {r8}, {r8}, {r7}, {}, {r8, r9}, {r8}, {0x0, r9}, {}, {}, {}, {r7, r9}], 0x1, "2156816c73038c"}) r10 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r10, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 457.189546][T30256] loop0: detected capacity change from 0 to 264192 [ 457.236338][T30256] FAT-fs (loop0): bogus number of FAT sectors [ 457.239342][T30266] loop3: detected capacity change from 0 to 264192 [ 457.242567][T30256] FAT-fs (loop0): Can't find a valid FAT filesystem 14:33:55 executing program 0: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, 0x0) [ 457.356841][T30273] loop5: detected capacity change from 0 to 264192 [ 457.369017][T30280] loop0: detected capacity change from 0 to 264192 14:33:56 executing program 2: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r6, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r9}, {}, {r8}, {r8}, {r8}, {}, {}, {0x0, r9}, {}, {0x0, r2}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r8, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {r8}, {}, {0x0, r9}, {r8, r9}, {0x0, r9}, {r7}, {}, {0x0, r9}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {r7}, {}, {r8}, {r7}, {}, {r8, r9}, {}, {r3, r9}, {0x0, r9}, {}, {}, {r8}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {r8}, {}, {0x0, r9}, {r7}, {r8, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8, r9}, {r7, r9}, {r8}, {}, {r7}, {r7}, {}, {}, {r7}, {}, {}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r7, r9}, {}, {}, {}, {r8}, {}, {}, {}, {r7}, {}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {r7}, {}, {}, {}, {0x0, r9}, {r7, r9}, {r8}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {r7}, {r8}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {r8}, {r7, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {0x0, r9}, {r8}, {}, {}, {r7}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {r8}, {r8, r9}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {r8}, {0x0, r9}, {}, {r8}, {r8}, {0x0, r4}, {}, {}, {}, {}, {0x0, r9}, {r7}, {}, {}, {0x0, r9}, {}, {r8, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {r7, r9}, {}, {}, {r8}, {r7}, {0x0, r9}, {}, {0x0, r9}, {r8}, {r8}, {r7}, {}, {0x0, r9}, {r8}], 0x1, "2156816c73038c"}) r10 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r10, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:33:56 executing program 0: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, 0x0) 14:33:56 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x8, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{0x0, r6}, {}, {r5}, {r5}, {r5}, {}, {}, {0x0, r6}, {}, {0x0, r1}, {}, {}, {r4, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {r5}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r4}, {}, {0x0, r6}, {r5}, {}, {}, {r5}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {r5, r6}, {}, {r2, r6}, {0x0, r6}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {r5}, {}, {0x0, r6}, {r4}, {r5, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {r4, r6}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {}, {}, {r5}, {}, {}, {0x0, r6}, {r4}, {}, {r5}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {r5}, {}, {}, {}, {r4}, {r4}, {}, {r4}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {}, {}, {r4}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r4}, {r5}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {r5}, {r5}, {0x0, r3}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {r4}, {}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {r4, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {r5}, {r4}, {}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {}, {r4, r6}], 0x1, "2156816c73038c"}) r7 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 457.419193][ C1] sd 0:0:1:0: tag#464 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 457.428996][ C1] sd 0:0:1:0: tag#464 CDB: opcode=0xe5 (vendor) [ 457.435380][ C1] sd 0:0:1:0: tag#464 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 457.444357][ C1] sd 0:0:1:0: tag#464 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 457.453323][ C1] sd 0:0:1:0: tag#464 CDB[20]: ba [ 457.636615][T30296] loop4: detected capacity change from 0 to 264192 [ 457.649888][T30298] loop0: detected capacity change from 0 to 264192 [ 457.676524][T30302] loop2: detected capacity change from 0 to 264192 14:33:56 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r1, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:33:56 executing program 0: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, 0x0) 14:33:56 executing program 5: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = fsopen(0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000006, 0x100010, r6, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r9}, {}, {r8}, {r8}, {r8}, {}, {}, {0x0, r9}, {}, {0x0, r2}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r8, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {r8}, {}, {0x0, r9}, {r8, r9}, {0x0, r9}, {r7}, {}, {0x0, r9}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {r7}, {}, {r8}, {r7}, {}, {r8, r9}, {}, {r3, r9}, {0x0, r9}, {}, {}, {r8}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {r8}, {}, {0x0, r9}, {r7}, {r8, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {r7}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8, r9}, {r7, r9}, {r8}, {}, {r7, r9}, {r7}, {0x0, r9}, {}, {r7}, {}, {}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {r7, r9}, {0x0, r9}, {r8, r9}, {r7, r9}, {0x0, r9}, {}, {}, {r8}, {}, {}, {0x0, r9}, {r7}, {}, {r8}, {}, {}, {r8}, {0x0, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {0x0, r9}, {}, {r7}, {}, {}, {}, {0x0, r9}, {r7, r9}, {r8}, {}, {}, {}, {r8}, {}, {}, {}, {r7}, {r7}, {}, {r7}, {r8}, {0x0, r9}, {r7}, {}, {r7}, {0x0, r9}, {r8}, {r7, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {0x0, r9}, {r8}, {}, {}, {r7}, {}, {0x0, r9}, {r8, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {0x0, r9}, {r7}, {r8}, {r8, r9}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {r8}, {0x0, r9}, {}, {r8}, {r8}, {0x0, r4}, {}, {}, {0x0, r9}, {}, {r7, r9}, {r7}, {}, {}, {0x0, r9}, {}, {r8, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {r8, r9}, {r8}, {r7, r9}, {}, {}, {r8}, {r7, r9}, {0x0, r9}, {}, {0x0, r9}, {r8}, {r8}, {r7}, {}, {r8, r9}, {r8}, {0x0, r9}, {}, {}, {}, {r7, r9}], 0x1, "2156816c73038c"}) r10 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r10, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 457.781819][ C1] sd 0:0:1:0: tag#465 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 457.791606][ C1] sd 0:0:1:0: tag#465 CDB: opcode=0xe5 (vendor) [ 457.797876][ C1] sd 0:0:1:0: tag#465 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 457.806861][ C1] sd 0:0:1:0: tag#465 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 457.815824][ C1] sd 0:0:1:0: tag#465 CDB[20]: ba 14:33:56 executing program 1: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x0, "0d4abfd4b32220"}) r9 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r9, 0xd000943d, &(0x7f0000054300)={0x0, [], 0x8, "7e6830ead6b793"}) r10 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r10, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000006, 0x100010, r11, 0x9472a000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x7, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)) r12 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r12, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 457.950418][ C1] sd 0:0:1:0: tag#466 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 457.960202][ C1] sd 0:0:1:0: tag#466 CDB: opcode=0xe5 (vendor) [ 457.966453][ C1] sd 0:0:1:0: tag#466 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 457.968301][T30309] loop0: detected capacity change from 0 to 264192 [ 457.975424][ C1] sd 0:0:1:0: tag#466 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 457.991116][ C1] sd 0:0:1:0: tag#466 CDB[20]: ba [ 458.008025][T30323] loop5: detected capacity change from 0 to 264192 [ 458.020627][T30325] loop3: detected capacity change from 0 to 264192 14:33:56 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x8, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{0x0, r6}, {}, {r5}, {r5}, {r5}, {}, {}, {0x0, r6}, {}, {0x0, r1}, {}, {}, {r4, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {r5}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r4}, {}, {0x0, r6}, {r5}, {}, {}, {r5}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {r5, r6}, {}, {r2, r6}, {0x0, r6}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {r5}, {}, {0x0, r6}, {r4}, {r5, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {r4, r6}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {}, {}, {r5}, {}, {}, {0x0, r6}, {r4}, {}, {r5}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {r5}, {}, {}, {}, {r4}, {r4}, {}, {r4}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {}, {}, {r4}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r4}, {r5}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {r5}, {r5}, {0x0, r3}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {r4}, {}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {r4, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {r5}, {r4}, {}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {}, {r4, r6}], 0x1, "2156816c73038c"}) r7 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 458.067951][ C1] sd 0:0:1:0: tag#467 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 458.077753][ C1] sd 0:0:1:0: tag#467 CDB: opcode=0xe5 (vendor) [ 458.084162][ C1] sd 0:0:1:0: tag#467 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 458.093140][ C1] sd 0:0:1:0: tag#467 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 458.102131][ C1] sd 0:0:1:0: tag#467 CDB[20]: ba 14:33:56 executing program 0: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x0, "0d4abfd4b32220"}) r9 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r9, 0xd000943d, &(0x7f0000054300)={0x0, [], 0x8, "7e6830ead6b793"}) r10 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r10, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000006, 0x100010, r11, 0x9472a000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x7, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)) r12 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r12, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 458.300740][T30340] loop4: detected capacity change from 0 to 264192 [ 458.329712][T30342] loop0: detected capacity change from 0 to 264192 [ 458.390029][ C1] sd 0:0:1:0: tag#468 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 458.399851][ C1] sd 0:0:1:0: tag#468 CDB: opcode=0xe5 (vendor) [ 458.406135][ C1] sd 0:0:1:0: tag#468 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 458.415114][ C1] sd 0:0:1:0: tag#468 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 458.424889][ C1] sd 0:0:1:0: tag#468 CDB[20]: ba 14:33:57 executing program 2: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r6, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r9}, {}, {r8}, {r8}, {r8}, {}, {}, {0x0, r9}, {}, {0x0, r2}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r8, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {r8}, {}, {0x0, r9}, {r8, r9}, {0x0, r9}, {r7}, {}, {0x0, r9}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {r7}, {}, {r8}, {r7}, {}, {r8, r9}, {}, {r3, r9}, {0x0, r9}, {}, {}, {r8}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {r8}, {}, {0x0, r9}, {r7}, {r8, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8, r9}, {r7, r9}, {r8}, {}, {r7}, {r7}, {}, {}, {r7}, {}, {}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r7, r9}, {}, {}, {}, {r8}, {}, {}, {}, {r7}, {}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {r7}, {}, {}, {}, {0x0, r9}, {r7, r9}, {r8}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {r7}, {r8}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {r8}, {r7, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {0x0, r9}, {r8}, {}, {}, {r7}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {r8}, {r8, r9}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {r8}, {0x0, r9}, {}, {r8}, {r8}, {0x0, r4}, {}, {}, {}, {}, {0x0, r9}, {r7}, {}, {}, {0x0, r9}, {}, {r8, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {r7, r9}, {}, {}, {r8}, {r7}, {0x0, r9}, {}, {0x0, r9}, {r8}, {r8}, {r7}, {}, {0x0, r9}, {r8}], 0x1, "2156816c73038c"}) r10 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r10, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:33:57 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r1, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:33:57 executing program 5: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = fsopen(0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000006, 0x100010, r6, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r9}, {}, {r8}, {r8}, {r8}, {}, {}, {0x0, r9}, {}, {0x0, r2}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r8, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {r8}, {}, {0x0, r9}, {r8, r9}, {0x0, r9}, {r7}, {}, {0x0, r9}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {r7}, {}, {r8}, {r7}, {}, {r8, r9}, {}, {r3, r9}, {0x0, r9}, {}, {}, {r8}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {r8}, {}, {0x0, r9}, {r7}, {r8, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {r7}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8, r9}, {r7, r9}, {r8}, {}, {r7, r9}, {r7}, {0x0, r9}, {}, {r7}, {}, {}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {r7, r9}, {0x0, r9}, {r8, r9}, {r7, r9}, {0x0, r9}, {}, {}, {r8}, {}, {}, {0x0, r9}, {r7}, {}, {r8}, {}, {}, {r8}, {0x0, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {0x0, r9}, {}, {r7}, {}, {}, {}, {0x0, r9}, {r7, r9}, {r8}, {}, {}, {}, {r8}, {}, {}, {}, {r7}, {r7}, {}, {r7}, {r8}, {0x0, r9}, {r7}, {}, {r7}, {0x0, r9}, {r8}, {r7, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {0x0, r9}, {r8}, {}, {}, {r7}, {}, {0x0, r9}, {r8, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {0x0, r9}, {r7}, {r8}, {r8, r9}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {r8}, {0x0, r9}, {}, {r8}, {r8}, {0x0, r4}, {}, {}, {0x0, r9}, {}, {r7, r9}, {r7}, {}, {}, {0x0, r9}, {}, {r8, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {r8, r9}, {r8}, {r7, r9}, {}, {}, {r8}, {r7, r9}, {0x0, r9}, {}, {0x0, r9}, {r8}, {r8}, {r7}, {}, {r8, r9}, {r8}, {0x0, r9}, {}, {}, {}, {r7, r9}], 0x1, "2156816c73038c"}) r10 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r10, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 458.709123][T30359] loop3: detected capacity change from 0 to 264192 [ 458.716521][T30362] loop2: detected capacity change from 0 to 264192 [ 458.796131][ C1] sd 0:0:1:0: tag#469 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 458.798074][T30370] loop5: detected capacity change from 0 to 264192 [ 458.805943][ C1] sd 0:0:1:0: tag#469 CDB: opcode=0xe5 (vendor) [ 458.818707][ C1] sd 0:0:1:0: tag#469 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 458.827652][ C1] sd 0:0:1:0: tag#469 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 458.836634][ C1] sd 0:0:1:0: tag#469 CDB[20]: ba 14:33:57 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}, 0x0, 0x6, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="469cba1d9a2ce7102d7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x1) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) clone(0x1050400, &(0x7f00000001c0)="b6bdc9226226790340490aff669a92fb49c82ff22aba4a239e0b6cc8885e5256a03ca5aa8777f65c4400b709ec9345f1e190", &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="b51ddc6b349431f27c6feb44774117dd515cee87fc23d7ceeaf5") ftruncate(r3, 0x1000) socket$unix(0x1, 0x1, 0x0) lseek(r3, 0x0, 0x2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) 14:33:57 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x8, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{0x0, r6}, {}, {r5}, {r5}, {r5}, {}, {}, {0x0, r6}, {}, {0x0, r1}, {}, {}, {r4, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {r5}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r4}, {}, {0x0, r6}, {r5}, {}, {}, {r5}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {r5, r6}, {}, {r2, r6}, {0x0, r6}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {r5}, {}, {0x0, r6}, {r4}, {r5, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {r4, r6}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {}, {}, {r5}, {}, {}, {0x0, r6}, {r4}, {}, {r5}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {r5}, {}, {}, {}, {r4}, {r4}, {}, {r4}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {}, {}, {r4}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r4}, {r5}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {r5}, {r5}, {0x0, r3}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {r4}, {}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {r4, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {r5}, {r4}, {}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {}, {r4, r6}], 0x1, "2156816c73038c"}) r7 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:33:57 executing program 5: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}], 0x0, "0d4abfd4b32220"}) r9 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r9, 0xd000943d, &(0x7f0000054300)={0x0, [], 0x8, "7e6830ead6b793"}) r10 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r10, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000006, 0x100010, r11, 0x9472a000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x7, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)) r12 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r12, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 458.940148][ C0] sd 0:0:1:0: tag#470 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 458.949940][ C0] sd 0:0:1:0: tag#470 CDB: opcode=0xe5 (vendor) [ 458.956185][ C0] sd 0:0:1:0: tag#470 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 458.965166][ C0] sd 0:0:1:0: tag#470 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 458.974137][ C0] sd 0:0:1:0: tag#470 CDB[20]: ba 14:33:57 executing program 1: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1f, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf1", 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000006, 0x100010, r6, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r9}, {}, {r8}, {r8}, {r8}, {}, {}, {0x0, r9}, {}, {0x0, r2}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r8, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {r8}, {}, {0x0, r9}, {r8, r9}, {0x0, r9}, {r7}, {}, {0x0, r9}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {r7}, {}, {r8}, {r7}, {}, {r8, r9}, {}, {r3, r9}, {0x0, r9}, {}, {}, {r8}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {r8}, {}, {0x0, r9}, {r7}, {r8, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {r7}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8, r9}, {r7, r9}, {r8}, {}, {r7, r9}, {r7}, {0x0, r9}, {}, {r7}, {}, {}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {r7, r9}, {0x0, r9}, {r8, r9}, {r7, r9}, {0x0, r9}, {}, {}, {r8}, {}, {}, {0x0, r9}, {r7}, {}, {r8}, {}, {}, {r8}, {0x0, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {0x0, r9}, {}, {r7}, {}, {}, {}, {0x0, r9}, {r7, r9}, {r8}, {}, {}, {}, {r8}, {}, {}, {}, {r7}, {r7}, {}, {r7}, {r8}, {0x0, r9}, {r7}, {}, {r7}, {0x0, r9}, {r8}, {r7, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {0x0, r9}, {r8}, {}, {}, {r7}, {}, {0x0, r9}, {r8, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {0x0, r9}, {r7}, {r8}, {r8, r9}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {r8}, {0x0, r9}, {}, {r8}, {r8}, {0x0, r4}, {}, {}, {0x0, r9}, {}, {r7, r9}, {r7}, {}, {}, {0x0, r9}, {}, {r8, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {r8, r9}, {r8}, {r7, r9}, {}, {}, {r8}, {r7, r9}, {0x0, r9}, {}, {0x0, r9}, {r8}, {r8}, {r7}, {}, {r8, r9}, {r8}, {0x0, r9}, {}, {}, {}, {r7, r9}], 0x1, "2156816c73038c"}) r10 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r10, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 459.106294][T30392] loop5: detected capacity change from 0 to 264192 [ 459.164051][T30399] loop4: detected capacity change from 0 to 264192 14:33:57 executing program 0: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}], 0x0, "0d4abfd4b32220"}) r9 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r9, 0xd000943d, &(0x7f0000054300)={0x0, [], 0x8, "7e6830ead6b793"}) r10 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r10, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000006, 0x100010, r11, 0x9472a000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x7, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)) r12 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r12, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:33:57 executing program 2: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r6, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r9}, {}, {r8}, {r8}, {r8}, {}, {}, {0x0, r9}, {}, {0x0, r2}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r8, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {r8}, {}, {0x0, r9}, {r8, r9}, {0x0, r9}, {r7}, {}, {0x0, r9}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {r7}, {}, {r8}, {r7}, {}, {r8, r9}, {}, {r3, r9}, {0x0, r9}, {}, {}, {r8}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {r8}, {}, {0x0, r9}, {r7}, {r8, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8, r9}, {r7, r9}, {r8}, {}, {r7}, {r7}, {}, {}, {r7}, {}, {}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r7, r9}, {}, {}, {}, {r8}, {}, {}, {}, {r7}, {}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {r7}, {}, {}, {}, {0x0, r9}, {r7, r9}, {r8}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {r7}, {r8}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {r8}, {r7, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {0x0, r9}, {r8}, {}, {}, {r7}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {r8}, {r8, r9}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {r8}, {0x0, r9}, {}, {r8}, {r8}, {0x0, r4}, {}, {}, {}, {}, {0x0, r9}, {r7}, {}, {}, {0x0, r9}, {}, {r8, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {r7, r9}, {}, {}, {r8}, {r7}, {0x0, r9}, {}, {0x0, r9}, {r8}, {r8}, {r7}, {}, {0x0, r9}, {r8}], 0x1, "2156816c73038c"}) r10 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r10, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 459.348633][T30412] loop0: detected capacity change from 0 to 264192 [ 459.512987][T30421] loop2: detected capacity change from 0 to 264192 14:33:58 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r1, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 459.668874][T30430] loop3: detected capacity change from 0 to 264192 14:33:58 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x8, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{0x0, r6}, {}, {r5}, {r5}, {r5}, {}, {}, {0x0, r6}, {}, {0x0, r1}, {}, {}, {r4, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {r5}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r4}, {}, {0x0, r6}, {r5}, {}, {}, {r5}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {r5, r6}, {}, {r2, r6}, {0x0, r6}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {r5}, {}, {0x0, r6}, {r4}, {r5, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {r4, r6}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {}, {}, {r5}, {}, {}, {0x0, r6}, {r4}, {}, {r5}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {r5}, {}, {}, {}, {r4}, {r4}, {}, {r4}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {}, {}, {r4}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r4}, {r5}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {r5}, {r5}, {0x0, r3}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {r4}, {}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {r4, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {r5}, {r4}, {}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {}, {r4, r6}], 0x1, "2156816c73038c"}) r7 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 459.870844][T30440] loop4: detected capacity change from 0 to 264192 14:33:58 executing program 5: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x0, [{}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0x0, "0d4abfd4b32220"}) r10 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r10, 0xd000943d, &(0x7f0000054300)={0x0, [], 0x8, "7e6830ead6b793"}) r11 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r11, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000006, 0x100010, r12, 0x9472a000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x7, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)) r13 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r13, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:33:58 executing program 1: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1f, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf1", 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000006, 0x100010, r6, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r9}, {}, {r8}, {r8}, {r8}, {}, {}, {0x0, r9}, {}, {0x0, r2}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r8, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {r8}, {}, {0x0, r9}, {r8, r9}, {0x0, r9}, {r7}, {}, {0x0, r9}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {r7}, {}, {r8}, {r7}, {}, {r8, r9}, {}, {r3, r9}, {0x0, r9}, {}, {}, {r8}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {r8}, {}, {0x0, r9}, {r7}, {r8, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {r7}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8, r9}, {r7, r9}, {r8}, {}, {r7, r9}, {r7}, {0x0, r9}, {}, {r7}, {}, {}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {r7, r9}, {0x0, r9}, {r8, r9}, {r7, r9}, {0x0, r9}, {}, {}, {r8}, {}, {}, {0x0, r9}, {r7}, {}, {r8}, {}, {}, {r8}, {0x0, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {0x0, r9}, {}, {r7}, {}, {}, {}, {0x0, r9}, {r7, r9}, {r8}, {}, {}, {}, {r8}, {}, {}, {}, {r7}, {r7}, {}, {r7}, {r8}, {0x0, r9}, {r7}, {}, {r7}, {0x0, r9}, {r8}, {r7, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {0x0, r9}, {r8}, {}, {}, {r7}, {}, {0x0, r9}, {r8, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {0x0, r9}, {r7}, {r8}, {r8, r9}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {r8}, {0x0, r9}, {}, {r8}, {r8}, {0x0, r4}, {}, {}, {0x0, r9}, {}, {r7, r9}, {r7}, {}, {}, {0x0, r9}, {}, {r8, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {r8, r9}, {r8}, {r7, r9}, {}, {}, {r8}, {r7, r9}, {0x0, r9}, {}, {0x0, r9}, {r8}, {r8}, {r7}, {}, {r8, r9}, {r8}, {0x0, r9}, {}, {}, {}, {r7, r9}], 0x1, "2156816c73038c"}) r10 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r10, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:33:58 executing program 2: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r6, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r9}, {}, {r8}, {r8}, {r8}, {}, {}, {0x0, r9}, {}, {0x0, r2}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r8, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {r8}, {}, {0x0, r9}, {r8, r9}, {0x0, r9}, {r7}, {}, {0x0, r9}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {r7}, {}, {r8}, {r7}, {}, {r8, r9}, {}, {r3, r9}, {0x0, r9}, {}, {}, {r8}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {r8}, {}, {0x0, r9}, {r7}, {r8, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8, r9}, {r7, r9}, {r8}, {}, {r7}, {r7}, {}, {}, {r7}, {}, {}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r7, r9}, {}, {}, {}, {r8}, {}, {}, {}, {r7}, {}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {r7}, {}, {}, {}, {0x0, r9}, {r7, r9}, {r8}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {r7}, {r8}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {r8}, {r7, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {0x0, r9}, {r8}, {}, {}, {r7}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {r8}, {r8, r9}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {r8}, {0x0, r9}, {}, {r8}, {r8}, {0x0, r4}, {}, {}, {}, {}, {0x0, r9}, {r7}, {}, {}, {0x0, r9}, {}, {r8, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {r7, r9}, {}, {}, {r8}, {r7}, {0x0, r9}, {}, {0x0, r9}, {r8}, {r8}, {r7}, {}, {0x0, r9}, {r8}], 0x1, "2156816c73038c"}) r10 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r10, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:33:58 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [], 0x0, "0d4abfd4b32220"}) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r2, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 460.176137][T30458] loop5: detected capacity change from 0 to 264192 [ 460.224637][T30462] loop2: detected capacity change from 0 to 264192 14:33:58 executing program 0: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}], 0x0, "0d4abfd4b32220"}) r9 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r9, 0xd000943d, &(0x7f0000054300)={0x0, [], 0x8, "7e6830ead6b793"}) r10 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r10, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000006, 0x100010, r11, 0x9472a000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x7, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)) r12 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r12, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 460.321392][T30471] loop3: detected capacity change from 0 to 264192 14:33:59 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x8, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{0x0, r6}, {}, {r5}, {r5}, {r5}, {}, {}, {0x0, r6}, {}, {0x0, r1}, {}, {}, {r4, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {r5}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r4}, {}, {0x0, r6}, {r5}, {}, {}, {r5}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {r5, r6}, {}, {r2, r6}, {0x0, r6}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {r5}, {}, {0x0, r6}, {r4}, {r5, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {r4, r6}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {}, {}, {r5}, {}, {}, {0x0, r6}, {r4}, {}, {r5}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {r5}, {}, {}, {}, {r4}, {r4}, {}, {r4}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {}, {}, {r4}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r4}, {r5}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {r5}, {r5}, {0x0, r3}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {r4}, {}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {r4, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {r5}, {r4}, {}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {}, {r4, r6}], 0x1, "2156816c73038c"}) r7 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 460.469820][T30481] loop0: detected capacity change from 0 to 264192 14:33:59 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [], 0x0, "0d4abfd4b32220"}) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r2, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 460.588260][T30491] loop4: detected capacity change from 0 to 264192 14:33:59 executing program 2: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r6, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r9}, {}, {r8}, {r8}, {r8}, {}, {}, {0x0, r9}, {}, {0x0, r2}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r8, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {r8}, {}, {0x0, r9}, {r8, r9}, {0x0, r9}, {r7}, {}, {0x0, r9}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {r7}, {}, {r8}, {r7}, {}, {r8, r9}, {}, {r3, r9}, {0x0, r9}, {}, {}, {r8}, {0x0, r9}, {0x0, r9}, {}, {r8}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {r8}, {}, {0x0, r9}, {r7}, {r8, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8, r9}, {r7, r9}, {r8}, {}, {r7}, {r7}, {}, {}, {r7}, {}, {}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r7, r9}, {}, {}, {}, {r8}, {}, {}, {}, {r7}, {}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {r7}, {}, {}, {}, {0x0, r9}, {r7, r9}, {r8}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {r7}, {r8}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {r8}, {r7, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {0x0, r9}, {r8}, {}, {}, {r7}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {r8}, {r8, r9}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {r8}, {0x0, r9}, {}, {r8}, {r8}, {0x0, r4}, {}, {}, {}, {}, {0x0, r9}, {r7}, {}, {}, {0x0, r9}, {}, {r8, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {r7, r9}, {}, {}, {r8}, {r7}, {0x0, r9}, {}, {0x0, r9}, {r8}, {r8}, {r7}, {}, {0x0, r9}, {r8}], 0x1, "2156816c73038c"}) r10 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r10, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 460.776112][T30500] loop3: detected capacity change from 0 to 264192 14:33:59 executing program 1: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1f, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf1", 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000006, 0x100010, r6, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r9}, {}, {r8}, {r8}, {r8}, {}, {}, {0x0, r9}, {}, {0x0, r2}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r8, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {r8}, {}, {0x0, r9}, {r8, r9}, {0x0, r9}, {r7}, {}, {0x0, r9}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {r7}, {}, {r8}, {r7}, {}, {r8, r9}, {}, {r3, r9}, {0x0, r9}, {}, {}, {r8}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {r8}, {}, {0x0, r9}, {r7}, {r8, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {r7}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8, r9}, {r7, r9}, {r8}, {}, {r7, r9}, {r7}, {0x0, r9}, {}, {r7}, {}, {}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {r7, r9}, {0x0, r9}, {r8, r9}, {r7, r9}, {0x0, r9}, {}, {}, {r8}, {}, {}, {0x0, r9}, {r7}, {}, {r8}, {}, {}, {r8}, {0x0, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {0x0, r9}, {}, {r7}, {}, {}, {}, {0x0, r9}, {r7, r9}, {r8}, {}, {}, {}, {r8}, {}, {}, {}, {r7}, {r7}, {}, {r7}, {r8}, {0x0, r9}, {r7}, {}, {r7}, {0x0, r9}, {r8}, {r7, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {0x0, r9}, {r8}, {}, {}, {r7}, {}, {0x0, r9}, {r8, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {0x0, r9}, {r7}, {r8}, {r8, r9}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {r8}, {0x0, r9}, {}, {r8}, {r8}, {0x0, r4}, {}, {}, {0x0, r9}, {}, {r7, r9}, {r7}, {}, {}, {0x0, r9}, {}, {r8, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {r8, r9}, {r8}, {r7, r9}, {}, {}, {r8}, {r7, r9}, {0x0, r9}, {}, {0x0, r9}, {r8}, {r8}, {r7}, {}, {r8, r9}, {r8}, {0x0, r9}, {}, {}, {}, {r7, r9}], 0x1, "2156816c73038c"}) r10 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r10, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 460.978931][T30510] loop2: detected capacity change from 0 to 264192 14:33:59 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [], 0x0, "0d4abfd4b32220"}) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r2, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:33:59 executing program 5: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x19, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d4", 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000006, 0x100010, r6, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r9}, {}, {r8}, {r8}, {r8}, {}, {}, {0x0, r9}, {}, {0x0, r2}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r8, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {r8}, {}, {0x0, r9}, {r8, r9}, {0x0, r9}, {r7}, {}, {0x0, r9}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {r7}, {}, {r8}, {r7}, {}, {r8, r9}, {}, {r3, r9}, {0x0, r9}, {}, {}, {r8}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {r8}, {}, {0x0, r9}, {r7}, {r8, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {r7}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8, r9}, {r7, r9}, {r8}, {}, {r7, r9}, {r7}, {0x0, r9}, {}, {r7}, {}, {}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {r7, r9}, {0x0, r9}, {r8, r9}, {r7, r9}, {0x0, r9}, {}, {}, {r8}, {}, {}, {0x0, r9}, {r7}, {}, {r8}, {}, {}, {r8}, {0x0, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {0x0, r9}, {}, {r7}, {}, {}, {}, {0x0, r9}, {r7, r9}, {r8}, {}, {}, {}, {r8}, {}, {}, {}, {r7}, {r7}, {}, {r7}, {r8}, {0x0, r9}, {r7}, {}, {r7}, {0x0, r9}, {r8}, {r7, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {0x0, r9}, {r8}, {}, {}, {r7}, {}, {0x0, r9}, {r8, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {0x0, r9}, {r7}, {r8}, {r8, r9}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {r8}, {0x0, r9}, {}, {r8}, {r8}, {0x0, r4}, {}, {}, {0x0, r9}, {}, {r7, r9}, {r7}, {}, {}, {0x0, r9}, {}, {r8, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {r8, r9}, {r8}, {r7, r9}, {}, {}, {r8}, {r7, r9}, {0x0, r9}, {}, {0x0, r9}, {r8}, {r8}, {r7}, {}, {r8, r9}, {r8}, {0x0, r9}, {}, {}, {}, {r7, r9}], 0x1, "2156816c73038c"}) r10 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r10, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:33:59 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x8, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{0x0, r6}, {}, {r5}, {r5}, {r5}, {}, {}, {0x0, r6}, {}, {0x0, r1}, {}, {}, {r4, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {r5}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r4}, {}, {0x0, r6}, {r5}, {}, {}, {r5}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {r5, r6}, {}, {r2, r6}, {0x0, r6}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {r5}, {}, {0x0, r6}, {r4}, {r5, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {r4, r6}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {}, {}, {r5}, {}, {}, {0x0, r6}, {r4}, {}, {r5}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {r5}, {}, {}, {}, {r4}, {r4}, {}, {r4}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {}, {}, {r4}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r4}, {r5}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {r5}, {r5}, {0x0, r3}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {r4}, {}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {r4, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {r5}, {r4}, {}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {}, {r4, r6}], 0x1, "2156816c73038c"}) r7 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 461.216070][T30528] loop5: detected capacity change from 0 to 264192 [ 461.219993][T30530] loop3: detected capacity change from 0 to 264192 14:34:00 executing program 0: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}], 0x0, "0d4abfd4b32220"}) r9 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r9, 0xd000943d, &(0x7f0000054300)={0x0, [], 0x8, "7e6830ead6b793"}) r10 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r10, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000006, 0x100010, r11, 0x9472a000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x7, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)) r12 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r12, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 461.379913][T30541] loop4: detected capacity change from 0 to 264192 14:34:00 executing program 2: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r6, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r9}, {}, {r8}, {r8}, {r8}, {}, {}, {0x0, r9}, {}, {0x0, r2}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r8, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {r8}, {}, {0x0, r9}, {r8, r9}, {0x0, r9}, {r7}, {}, {0x0, r9}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {r7}, {}, {r8}, {r7}, {}, {r8, r9}, {}, {r3, r9}, {0x0, r9}, {}, {}, {r8}, {0x0, r9}, {0x0, r9}, {}, {r8}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {r8}, {}, {0x0, r9}, {r7}, {r8, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8, r9}, {r7, r9}, {r8}, {}, {r7}, {r7}, {}, {}, {r7}, {}, {}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r7, r9}, {}, {}, {}, {r8}, {}, {}, {}, {r7}, {}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {r7}, {}, {}, {}, {0x0, r9}, {r7, r9}, {r8}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {r7}, {r8}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {r8}, {r7, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {0x0, r9}, {r8}, {}, {}, {r7}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {r8}, {r8, r9}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {r8}, {0x0, r9}, {}, {r8}, {r8}, {0x0, r4}, {}, {}, {}, {}, {0x0, r9}, {r7}, {}, {}, {0x0, r9}, {}, {r8, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {r7, r9}, {}, {}, {r8}, {r7}, {0x0, r9}, {}, {0x0, r9}, {r8}, {r8}, {r7}, {}, {0x0, r9}, {r8}], 0x1, "2156816c73038c"}) r10 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r10, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:34:00 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r2, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 461.571701][T30551] loop0: detected capacity change from 0 to 264192 [ 461.648674][T30559] loop2: detected capacity change from 0 to 264192 [ 461.689249][T30566] loop3: detected capacity change from 0 to 264192 [ 461.722755][ C1] scsi_io_completion_action: 11 callbacks suppressed [ 461.722881][ C1] sd 0:0:1:0: tag#451 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 461.739396][ C1] sd 0:0:1:0: tag#451 CDB: opcode=0xe5 (vendor) [ 461.745644][ C1] sd 0:0:1:0: tag#451 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 461.754791][ C1] sd 0:0:1:0: tag#451 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 461.764055][ C1] sd 0:0:1:0: tag#451 CDB[20]: ba [ 461.787754][ C0] sd 0:0:1:0: tag#452 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 461.797658][ C0] sd 0:0:1:0: tag#452 CDB: opcode=0xe5 (vendor) [ 461.804013][ C0] sd 0:0:1:0: tag#452 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 461.813562][ C0] sd 0:0:1:0: tag#452 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 461.822761][ C0] sd 0:0:1:0: tag#452 CDB[20]: ba 14:34:00 executing program 5: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x0, [{}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0x0, "0d4abfd4b32220"}) r10 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r10, 0xd000943d, &(0x7f0000054300)={0x0, [], 0x8, "7e6830ead6b793"}) r11 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r11, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000006, 0x100010, r12, 0x9472a000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x7, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)) r13 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r13, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:34:00 executing program 1: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x0, [{}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0x0, "0d4abfd4b32220"}) r10 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r10, 0xd000943d, &(0x7f0000054300)={0x0, [], 0x8, "7e6830ead6b793"}) r11 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r11, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000006, 0x100010, r12, 0x9472a000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x7, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)) r13 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r13, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:34:00 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x8, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{0x0, r6}, {}, {r5}, {r5}, {r5}, {}, {}, {0x0, r6}, {}, {0x0, r1}, {}, {}, {r4, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {r5}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r4}, {}, {0x0, r6}, {r5}, {}, {}, {r5}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {r5, r6}, {}, {r2, r6}, {0x0, r6}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {r5}, {}, {0x0, r6}, {r4}, {r5, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {r4, r6}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {}, {}, {r5}, {}, {}, {0x0, r6}, {r4}, {}, {r5}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {r5}, {}, {}, {}, {r4}, {r4}, {}, {r4}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {}, {}, {r4}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r4}, {r5}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {r5}, {r5}, {0x0, r3}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {r4}, {}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {r4, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {r5}, {r4}, {}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {}, {r4, r6}], 0x1, "2156816c73038c"}) r7 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 462.044974][ C0] sd 0:0:1:0: tag#453 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 462.054773][ C0] sd 0:0:1:0: tag#453 CDB: opcode=0xe5 (vendor) [ 462.061225][ C0] sd 0:0:1:0: tag#453 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 462.061637][T30581] loop5: detected capacity change from 0 to 264192 [ 462.070197][ C0] sd 0:0:1:0: tag#453 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 462.070216][ C0] sd 0:0:1:0: tag#453 CDB[20]: ba 14:34:00 executing program 2: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r6, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r9}, {}, {r8}, {r8}, {r8}, {}, {}, {0x0, r9}, {}, {0x0, r2}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r8, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {r8}, {}, {0x0, r9}, {r8, r9}, {0x0, r9}, {r7}, {}, {0x0, r9}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {r7}, {}, {r8}, {r7}, {}, {r8, r9}, {}, {r3, r9}, {0x0, r9}, {}, {}, {r8}, {0x0, r9}, {0x0, r9}, {}, {r8}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {r8}, {}, {0x0, r9}, {r7}, {r8, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8, r9}, {r7, r9}, {r8}, {}, {r7}, {r7}, {}, {}, {r7}, {}, {}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r7, r9}, {}, {}, {}, {r8}, {}, {}, {}, {r7}, {}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {r7}, {}, {}, {}, {0x0, r9}, {r7, r9}, {r8}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {r7}, {r8}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {r8}, {r7, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {0x0, r9}, {r8}, {}, {}, {r7}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {r8}, {r8, r9}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {r8}, {0x0, r9}, {}, {r8}, {r8}, {0x0, r4}, {}, {}, {}, {}, {0x0, r9}, {r7}, {}, {}, {0x0, r9}, {}, {r8, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {r7, r9}, {}, {}, {r8}, {r7}, {0x0, r9}, {}, {0x0, r9}, {r8}, {r8}, {r7}, {}, {0x0, r9}, {r8}], 0x1, "2156816c73038c"}) r10 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r10, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 462.157464][ C0] sd 0:0:1:0: tag#454 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 462.167246][ C0] sd 0:0:1:0: tag#454 CDB: opcode=0xe5 (vendor) [ 462.173529][ C0] sd 0:0:1:0: tag#454 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 462.182608][ C0] sd 0:0:1:0: tag#454 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 462.191618][ C0] sd 0:0:1:0: tag#454 CDB[20]: ba [ 462.266360][T30592] loop4: detected capacity change from 0 to 264192 14:34:00 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r2, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 462.415286][T30601] loop2: detected capacity change from 0 to 264192 [ 462.476029][ C1] sd 0:0:1:0: tag#455 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 462.485815][ C1] sd 0:0:1:0: tag#455 CDB: opcode=0xe5 (vendor) [ 462.492485][ C1] sd 0:0:1:0: tag#455 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 462.501645][ C1] sd 0:0:1:0: tag#455 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 462.510619][ C1] sd 0:0:1:0: tag#455 CDB[20]: ba 14:34:01 executing program 0: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x0, [{}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0x0, "0d4abfd4b32220"}) r10 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r10, 0xd000943d, &(0x7f0000054300)={0x0, [], 0x8, "7e6830ead6b793"}) r11 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r11, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000006, 0x100010, r12, 0x9472a000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x7, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)) r13 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r13, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 462.538229][T30609] loop3: detected capacity change from 0 to 264192 [ 462.615803][ C0] sd 0:0:1:0: tag#456 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 462.625599][ C0] sd 0:0:1:0: tag#456 CDB: opcode=0xe5 (vendor) [ 462.631867][ C0] sd 0:0:1:0: tag#456 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 462.640830][ C0] sd 0:0:1:0: tag#456 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 462.649806][ C0] sd 0:0:1:0: tag#456 CDB[20]: ba [ 462.763406][T30619] loop0: detected capacity change from 0 to 264192 [ 462.810522][ C0] sd 0:0:1:0: tag#457 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 462.820469][ C0] sd 0:0:1:0: tag#457 CDB: opcode=0xe5 (vendor) [ 462.828325][ C0] sd 0:0:1:0: tag#457 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 462.837305][ C0] sd 0:0:1:0: tag#457 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 462.846495][ C0] sd 0:0:1:0: tag#457 CDB[20]: ba 14:34:01 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x8, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{0x0, r6}, {}, {r5}, {r5}, {r5}, {}, {}, {0x0, r6}, {}, {0x0, r1}, {}, {}, {r4, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {r5}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r4}, {}, {0x0, r6}, {r5}, {}, {}, {r5}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {r5, r6}, {}, {r2, r6}, {0x0, r6}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {r5}, {}, {0x0, r6}, {r4}, {r5, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {r4, r6}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {}, {}, {r5}, {}, {}, {0x0, r6}, {r4}, {}, {r5}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {r5}, {}, {}, {}, {r4}, {r4}, {}, {r4}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {}, {}, {r4}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r4}, {r5}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {r5}, {r5}, {0x0, r3}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {r4}, {}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {r4, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {r5}, {r4}, {}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {}, {r4, r6}], 0x1, "2156816c73038c"}) r7 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:34:01 executing program 2: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r6, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r9}, {}, {r8}, {r8}, {r8}, {}, {}, {0x0, r9}, {}, {0x0, r2}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r8, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {r8}, {}, {0x0, r9}, {r8, r9}, {0x0, r9}, {r7}, {}, {0x0, r9}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {r7}, {}, {r8}, {r7}, {}, {r8, r9}, {}, {r3, r9}, {0x0, r9}, {}, {}, {r8}, {0x0, r9}, {}, {0x0, r9}, {r8}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {r8}, {}, {0x0, r9}, {r7}, {r8, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8, r9}, {r7, r9}, {r8}, {}, {r7}, {r7}, {}, {}, {r7}, {}, {}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r7, r9}, {}, {}, {}, {r8}, {}, {}, {}, {r7}, {}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {r7}, {}, {}, {}, {0x0, r9}, {r7, r9}, {r8}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {r7}, {r8}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {r8}, {r7, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {0x0, r9}, {r8}, {}, {}, {r7}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {r8}, {r8, r9}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {r8}, {0x0, r9}, {}, {r8}, {r8}, {0x0, r4}, {}, {}, {}, {}, {0x0, r9}, {r7}, {}, {}, {0x0, r9}, {}, {r8, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {r7, r9}, {}, {}, {r8}, {r7}, {0x0, r9}, {}, {0x0, r9}, {r8}, {r8}, {r7}, {}, {0x0, r9}, {r8}], 0x1, "2156816c73038c"}) r10 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r10, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:34:01 executing program 5: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r8}, {}, {r7}, {r7}, {r7}, {}, {}, {0x0, r8}, {}, {0x0, r2}, {}, {}, {r6, r8}, {0x0, r8}, {}, {r7, r8}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {}, {0x0, r8}, {}, {}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {r7}, {}, {0x0, r8}, {r7, r8}, {0x0, r8}, {r6}, {}, {0x0, r8}, {r7}, {}, {}, {r7}, {0x0, r8}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {r6}, {}, {r7}, {r6}, {}, {r7, r8}, {}, {r3, r8}, {0x0, r8}, {}, {}, {r7}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {r7}, {}, {0x0, r8}, {r6}, {r7, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {r6}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7, r8}, {r6, r8}, {r7}, {}, {r6, r8}, {r6}, {0x0, r8}, {}, {r6}, {}, {}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {r6, r8}, {0x0, r8}, {r7, r8}, {r6, r8}, {0x0, r8}, {}, {}, {r7}, {}, {}, {0x0, r8}, {r6}, {}, {r7}, {}, {}, {r7}, {0x0, r8}, {0x0, r8}, {}, {0x0, r8}, {}, {0x0, r8}, {}, {r6}, {}, {}, {}, {0x0, r8}, {r6, r8}, {r7}, {}, {}, {}, {r7}, {}, {}, {}, {r6}, {r6}, {}, {r6}, {r7}, {0x0, r8}, {r6}, {}, {r6}, {0x0, r8}, {r7}, {r6, r8}, {0x0, r8}, {}, {0x0, r8}, {}, {}, {0x0, r8}, {r7}, {}, {}, {r6}, {}, {0x0, r8}, {r7, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {0x0, r8}, {r6}, {r7}, {r7, r8}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {r7}, {0x0, r8}, {}, {r7}, {r7}, {0x0, r4}, {}, {}, {0x0, r8}, {}, {r6, r8}, {r6}, {}, {}, {0x0, r8}, {}, {r7, r8}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {r7, r8}, {r7}, {r6, r8}, {}, {}, {r7}, {r6, r8}, {0x0, r8}, {}, {0x0, r8}, {r7}, {r7}, {r6}, {}, {r7, r8}, {r7}, {0x0, r8}, {}, {}, {}, {r6, r8}], 0x1, "2156816c73038c"}) r9 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r9, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:34:01 executing program 1: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000054300)={0x0, [], 0x8, "7e6830ead6b793"}) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000006, 0x100010, r4, 0x9472a000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x7, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)) r5 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r5, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 463.010788][ C0] sd 0:0:1:0: tag#458 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 463.020577][ C0] sd 0:0:1:0: tag#458 CDB: opcode=0xe5 (vendor) [ 463.026816][ C0] sd 0:0:1:0: tag#458 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 463.035881][ C0] sd 0:0:1:0: tag#458 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 463.044930][ C0] sd 0:0:1:0: tag#458 CDB[20]: ba 14:34:01 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r2, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 463.073407][T30634] loop4: detected capacity change from 0 to 264192 [ 463.185484][T30649] loop3: detected capacity change from 0 to 264192 [ 463.213045][T30654] loop5: detected capacity change from 0 to 264192 [ 463.230083][T30655] loop2: detected capacity change from 0 to 264192 [ 463.252097][ C0] sd 0:0:1:0: tag#459 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 463.261906][ C0] sd 0:0:1:0: tag#459 CDB: opcode=0xe5 (vendor) [ 463.268174][ C0] sd 0:0:1:0: tag#459 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 463.277105][ C0] sd 0:0:1:0: tag#459 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 463.286160][ C0] sd 0:0:1:0: tag#459 CDB[20]: ba [ 463.305005][ C1] sd 0:0:1:0: tag#460 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 463.314797][ C1] sd 0:0:1:0: tag#460 CDB: opcode=0xe5 (vendor) [ 463.321094][ C1] sd 0:0:1:0: tag#460 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 463.330064][ C1] sd 0:0:1:0: tag#460 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 463.339036][ C1] sd 0:0:1:0: tag#460 CDB[20]: ba 14:34:02 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x8, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{0x0, r6}, {}, {r5}, {r5}, {r5}, {}, {}, {0x0, r6}, {}, {0x0, r1}, {}, {}, {r4, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {r5}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r4}, {}, {0x0, r6}, {r5}, {}, {}, {r5}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {r5, r6}, {}, {r2, r6}, {0x0, r6}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {r5}, {}, {0x0, r6}, {r4}, {r5, r6}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {r4, r6}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {}, {}, {r5}, {}, {}, {0x0, r6}, {r4}, {}, {r5}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {r5}, {}, {}, {}, {r4}, {r4}, {}, {r4}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {}, {}, {r4}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r4}, {r5}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {r5}, {r5}, {0x0, r3}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {r4}, {}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {r4, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {r5}, {r4}, {}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {}, {r4, r6}], 0x1, "2156816c73038c"}) r7 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:34:02 executing program 0: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000054300)={0x0, [], 0x8, "7e6830ead6b793"}) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000006, 0x100010, r4, 0x9472a000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x7, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)) r5 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r5, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:34:02 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r2, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:34:02 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r2, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 463.756721][T30671] loop4: detected capacity change from 0 to 264192 [ 463.781653][T30681] loop0: detected capacity change from 0 to 264192 [ 463.842949][T30687] loop3: detected capacity change from 0 to 264192 14:34:02 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r2, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:34:02 executing program 1 (fault-call:1 fault-nth:0): set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) [ 463.955625][T30698] loop5: detected capacity change from 0 to 264192 [ 464.033358][T30705] loop3: detected capacity change from 0 to 264192 [ 464.045396][T30708] FAULT_INJECTION: forcing a failure. [ 464.045396][T30708] name failslab, interval 1, probability 0, space 0, times 0 [ 464.058538][T30708] CPU: 1 PID: 30708 Comm: syz-executor.1 Not tainted 5.14.0-syzkaller #0 [ 464.066974][T30708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 464.077198][T30708] Call Trace: [ 464.080483][T30708] dump_stack_lvl+0xd6/0x122 [ 464.085091][T30708] dump_stack+0x11/0x1b [ 464.089344][T30708] should_fail+0x23c/0x250 [ 464.093847][T30708] ? __se_sys_memfd_create+0xfb/0x390 [ 464.099223][T30708] __should_failslab+0x81/0x90 [ 464.104008][T30708] should_failslab+0x5/0x20 [ 464.108527][T30708] __kmalloc+0x6f/0x350 [ 464.112746][T30708] ? strnlen_user+0x137/0x1c0 [ 464.117512][T30708] __se_sys_memfd_create+0xfb/0x390 [ 464.122719][T30708] __x64_sys_memfd_create+0x2d/0x40 [ 464.127989][T30708] do_syscall_64+0x44/0xa0 [ 464.132449][T30708] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 464.138441][T30708] RIP: 0033:0x4665f9 [ 464.144328][T30708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 464.164372][T30708] RSP: 002b:00007ff01116ff48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 464.172867][T30708] RAX: ffffffffffffffda RBX: 0000000020000080 RCX: 00000000004665f9 14:34:02 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r2, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:34:02 executing program 2: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r6, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r9}, {}, {r8}, {r8}, {r8}, {}, {}, {0x0, r9}, {}, {0x0, r2}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r8, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {r8}, {}, {0x0, r9}, {r8, r9}, {0x0, r9}, {r7}, {}, {0x0, r9}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {r7}, {}, {r8}, {r7}, {}, {r8, r9}, {}, {r3, r9}, {0x0, r9}, {}, {}, {r8}, {0x0, r9}, {}, {0x0, r9}, {r8}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {r8}, {}, {0x0, r9}, {r7}, {r8, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8, r9}, {r7, r9}, {r8}, {}, {r7}, {r7}, {}, {}, {r7}, {}, {}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r7, r9}, {}, {}, {}, {r8}, {}, {}, {}, {r7}, {}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {r7}, {}, {}, {}, {0x0, r9}, {r7, r9}, {r8}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {r7}, {r8}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {r8}, {r7, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {0x0, r9}, {r8}, {}, {}, {r7}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {r8}, {r8, r9}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {r8}, {0x0, r9}, {}, {r8}, {r8}, {0x0, r4}, {}, {}, {}, {}, {0x0, r9}, {r7}, {}, {}, {0x0, r9}, {}, {r8, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {r7, r9}, {}, {}, {r8}, {r7}, {0x0, r9}, {}, {0x0, r9}, {r8}, {r8}, {r7}, {}, {0x0, r9}, {r8}], 0x1, "2156816c73038c"}) r10 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r10, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:34:02 executing program 1 (fault-call:1 fault-nth:1): set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) 14:34:02 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x8, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{0x0, r6}, {}, {r5}, {r5}, {r5}, {}, {}, {0x0, r6}, {}, {0x0, r1}, {}, {}, {r4, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {r5}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r4}, {}, {0x0, r6}, {r5}, {}, {}, {r5}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {r5, r6}, {}, {r2, r6}, {0x0, r6}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {r5}, {}, {0x0, r6}, {r4}, {r5, r6}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {r4, r6}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {}, {}, {r5}, {}, {}, {0x0, r6}, {r4}, {}, {r5}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {r5}, {}, {}, {}, {r4}, {r4}, {}, {r4}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {}, {}, {r4}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r4}, {r5}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {r5}, {r5}, {0x0, r3}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {r4}, {}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {r4, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {r5}, {r4}, {}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {}, {r4, r6}], 0x1, "2156816c73038c"}) r7 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 464.180905][T30708] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004bee86 [ 464.188937][T30708] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffffffffffff [ 464.196916][T30708] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 464.205024][T30708] R13: 00000000200003c0 R14: 0000000008100000 R15: 00000000200004c0 [ 464.266439][T30717] FAULT_INJECTION: forcing a failure. [ 464.266439][T30717] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 464.277615][T30719] loop3: detected capacity change from 0 to 264192 [ 464.279756][T30717] CPU: 0 PID: 30717 Comm: syz-executor.1 Not tainted 5.14.0-syzkaller #0 [ 464.295110][T30717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 464.305338][T30717] Call Trace: [ 464.308618][T30717] dump_stack_lvl+0xd6/0x122 [ 464.313230][T30717] dump_stack+0x11/0x1b [ 464.317487][T30717] should_fail+0x23c/0x250 [ 464.321923][T30717] should_fail_usercopy+0x16/0x20 [ 464.326996][T30717] _copy_from_user+0x1c/0xd0 [ 464.331673][T30717] __se_sys_memfd_create+0x137/0x390 [ 464.337497][T30717] __x64_sys_memfd_create+0x2d/0x40 [ 464.342975][T30717] do_syscall_64+0x44/0xa0 [ 464.347490][T30717] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 464.353477][T30717] RIP: 0033:0x4665f9 [ 464.357356][T30717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 464.377407][T30717] RSP: 002b:00007ff01116ff48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 464.385819][T30717] RAX: ffffffffffffffda RBX: 0000000020000080 RCX: 00000000004665f9 [ 464.393864][T30717] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004bee86 [ 464.401977][T30717] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffffffffffff 14:34:03 executing program 1 (fault-call:1 fault-nth:2): set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) [ 464.409938][T30717] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 464.417900][T30717] R13: 00000000200003c0 R14: 0000000008100000 R15: 00000000200004c0 14:34:03 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r2, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 464.471513][T30728] loop2: detected capacity change from 0 to 264192 [ 464.502383][T30734] FAULT_INJECTION: forcing a failure. [ 464.502383][T30734] name failslab, interval 1, probability 0, space 0, times 0 [ 464.515152][T30734] CPU: 1 PID: 30734 Comm: syz-executor.1 Not tainted 5.14.0-syzkaller #0 [ 464.523565][T30734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 464.533671][T30734] Call Trace: [ 464.536987][T30734] dump_stack_lvl+0xd6/0x122 [ 464.541672][T30734] dump_stack+0x11/0x1b [ 464.545822][T30734] should_fail+0x23c/0x250 [ 464.550274][T30734] ? shmem_alloc_inode+0x22/0x30 [ 464.555352][T30734] __should_failslab+0x81/0x90 [ 464.560179][T30734] ? shmem_match+0xa0/0xa0 [ 464.564596][T30734] should_failslab+0x5/0x20 [ 464.569101][T30734] kmem_cache_alloc+0x4f/0x300 [ 464.573868][T30734] ? shmem_match+0xa0/0xa0 [ 464.578369][T30734] shmem_alloc_inode+0x22/0x30 [ 464.583134][T30734] new_inode_pseudo+0x38/0x1c0 [ 464.587902][T30734] new_inode+0x21/0x120 [ 464.592092][T30734] shmem_get_inode+0xb7/0x4a0 [ 464.596819][T30734] __shmem_file_setup+0xf1/0x1d0 [ 464.601767][T30734] shmem_file_setup+0x37/0x40 [ 464.606540][T30734] __se_sys_memfd_create+0x1eb/0x390 [ 464.611831][T30734] __x64_sys_memfd_create+0x2d/0x40 [ 464.617050][T30734] do_syscall_64+0x44/0xa0 [ 464.621517][T30734] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 464.627504][T30734] RIP: 0033:0x4665f9 [ 464.631403][T30734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 464.651274][T30734] RSP: 002b:00007ff01116ff48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 464.659848][T30734] RAX: ffffffffffffffda RBX: 0000000020000080 RCX: 00000000004665f9 14:34:03 executing program 0: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r6, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r9}, {}, {r8}, {r8}, {r8}, {}, {}, {0x0, r9}, {}, {0x0, r2}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r8, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {r8}, {}, {0x0, r9}, {r8, r9}, {0x0, r9}, {r7}, {}, {0x0, r9}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {r7}, {}, {r8}, {r7}, {}, {r8, r9}, {}, {r3, r9}, {0x0, r9}, {}, {}, {r8}, {0x0, r9}, {}, {0x0, r9}, {r8}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {r8}, {}, {0x0, r9}, {r7}, {r8, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8, r9}, {r7, r9}, {r8}, {}, {r7}, {r7}, {}, {}, {r7}, {}, {}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r7, r9}, {}, {}, {}, {r8}, {}, {}, {}, {r7}, {}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {r7}, {}, {}, {}, {0x0, r9}, {r7, r9}, {r8}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {r7}, {r8}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {r8}, {r7, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {0x0, r9}, {r8}, {}, {}, {r7}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {r8}, {r8, r9}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {r8}, {0x0, r9}, {}, {r8}, {r8}, {0x0, r4}, {}, {}, {}, {}, {0x0, r9}, {r7}, {}, {}, {0x0, r9}, {}, {r8, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {r7, r9}, {}, {}, {r8}, {r7}, {0x0, r9}, {}, {0x0, r9}, {r8}, {r8}, {r7}, {}, {0x0, r9}, {r8}], 0x1, "2156816c73038c"}) r10 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r10, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 464.667890][T30734] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004bee86 [ 464.675897][T30734] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffffffffffff [ 464.683890][T30734] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 464.691879][T30734] R13: 00000000200003c0 R14: 0000000008100000 R15: 00000000200004c0 14:34:03 executing program 1 (fault-call:1 fault-nth:3): set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) [ 464.737281][T30735] loop3: detected capacity change from 0 to 264192 [ 464.767264][T30746] FAULT_INJECTION: forcing a failure. [ 464.767264][T30746] name failslab, interval 1, probability 0, space 0, times 0 [ 464.776527][T30748] loop4: detected capacity change from 0 to 264192 [ 464.779901][T30746] CPU: 1 PID: 30746 Comm: syz-executor.1 Not tainted 5.14.0-syzkaller #0 [ 464.794798][T30746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 464.804926][T30746] Call Trace: [ 464.808204][T30746] dump_stack_lvl+0xd6/0x122 [ 464.812801][T30746] dump_stack+0x11/0x1b [ 464.816954][T30746] should_fail+0x23c/0x250 [ 464.821371][T30746] ? security_inode_alloc+0x30/0x180 [ 464.826663][T30746] __should_failslab+0x81/0x90 [ 464.831426][T30746] should_failslab+0x5/0x20 14:34:03 executing program 5 (fault-call:2 fault-nth:0): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x0) [ 464.837268][T30746] kmem_cache_alloc+0x4f/0x300 [ 464.842128][T30746] security_inode_alloc+0x30/0x180 [ 464.847335][T30746] inode_init_always+0x20d/0x440 [ 464.852302][T30746] ? shmem_match+0xa0/0xa0 [ 464.856730][T30746] new_inode_pseudo+0x73/0x1c0 [ 464.861500][T30746] new_inode+0x21/0x120 [ 464.865690][T30746] shmem_get_inode+0xb7/0x4a0 [ 464.870371][T30746] __shmem_file_setup+0xf1/0x1d0 [ 464.875552][T30746] shmem_file_setup+0x37/0x40 [ 464.880234][T30746] __se_sys_memfd_create+0x1eb/0x390 14:34:03 executing program 2: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r6, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r9}, {}, {r8}, {r8}, {r8}, {}, {}, {0x0, r9}, {}, {0x0, r2}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r8, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {r8}, {}, {0x0, r9}, {r8, r9}, {0x0, r9}, {r7}, {}, {0x0, r9}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {r7}, {}, {r8}, {r7}, {}, {r8, r9}, {}, {r3, r9}, {0x0, r9}, {}, {}, {r8}, {0x0, r9}, {}, {0x0, r9}, {r8}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {r8}, {}, {0x0, r9}, {r7}, {r8, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8, r9}, {r7, r9}, {r8}, {}, {r7}, {r7}, {}, {}, {r7}, {}, {}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r7, r9}, {}, {}, {}, {r8}, {}, {}, {}, {r7}, {}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {r7}, {}, {}, {}, {0x0, r9}, {r7, r9}, {r8}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {r7}, {r8}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {r8}, {r7, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {0x0, r9}, {r8}, {}, {}, {r7}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {r8}, {r8, r9}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {r8}, {0x0, r9}, {}, {r8}, {r8}, {0x0, r4}, {}, {}, {}, {}, {0x0, r9}, {r7}, {}, {}, {0x0, r9}, {}, {r8, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {r7, r9}, {}, {}, {r8}, {r7}, {0x0, r9}, {}, {0x0, r9}, {r8}, {r8}, {r7}, {}, {0x0, r9}, {r8}], 0x1, "2156816c73038c"}) r10 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r10, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:34:03 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x8, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{0x0, r6}, {}, {r5}, {r5}, {r5}, {}, {}, {0x0, r6}, {}, {0x0, r1}, {}, {}, {r4, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {r5}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r4}, {}, {0x0, r6}, {r5}, {}, {}, {r5}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {r5, r6}, {}, {r2, r6}, {0x0, r6}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {r5}, {}, {0x0, r6}, {r4}, {r5, r6}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {r4, r6}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {}, {}, {r5}, {}, {}, {0x0, r6}, {r4}, {}, {r5}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {r5}, {}, {}, {}, {r4}, {r4}, {}, {r4}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {}, {}, {r4}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r4}, {r5}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {r5}, {r5}, {0x0, r3}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {r4}, {}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {r4, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {r5}, {r4}, {}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {}, {r4, r6}], 0x1, "2156816c73038c"}) r7 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 464.885612][T30746] __x64_sys_memfd_create+0x2d/0x40 [ 464.890814][T30746] do_syscall_64+0x44/0xa0 [ 464.895445][T30746] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 464.901437][T30746] RIP: 0033:0x4665f9 [ 464.905407][T30746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 464.925020][T30746] RSP: 002b:00007ff01116ff48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f 14:34:03 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r2, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 464.933439][T30746] RAX: ffffffffffffffda RBX: 0000000020000080 RCX: 00000000004665f9 [ 464.941503][T30746] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004bee86 [ 464.949588][T30746] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffffffffffff [ 464.957572][T30746] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 464.965547][T30746] R13: 00000000200003c0 R14: 0000000008100000 R15: 00000000200004c0 14:34:03 executing program 1 (fault-call:1 fault-nth:4): set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) [ 464.995268][T30756] loop3: detected capacity change from 0 to 264192 [ 465.056447][T30763] loop0: detected capacity change from 0 to 264192 [ 465.072311][T30771] FAULT_INJECTION: forcing a failure. [ 465.072311][T30771] name failslab, interval 1, probability 0, space 0, times 0 [ 465.085222][T30771] CPU: 1 PID: 30771 Comm: syz-executor.1 Not tainted 5.14.0-syzkaller #0 [ 465.093702][T30771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 465.103757][T30771] Call Trace: [ 465.107033][T30771] dump_stack_lvl+0xd6/0x122 [ 465.111787][T30771] dump_stack+0x11/0x1b [ 465.116015][T30771] should_fail+0x23c/0x250 [ 465.120434][T30771] ? __d_alloc+0x36/0x370 [ 465.124750][T30771] __should_failslab+0x81/0x90 [ 465.129512][T30771] should_failslab+0x5/0x20 [ 465.134011][T30771] kmem_cache_alloc+0x4f/0x300 [ 465.138768][T30771] __d_alloc+0x36/0x370 [ 465.142927][T30771] d_alloc_pseudo+0x1a/0x50 [ 465.147438][T30771] alloc_file_pseudo+0x77/0x150 [ 465.152280][T30771] __shmem_file_setup+0x14c/0x1d0 [ 465.157304][T30771] shmem_file_setup+0x37/0x40 [ 465.162067][T30771] __se_sys_memfd_create+0x1eb/0x390 [ 465.167422][T30771] __x64_sys_memfd_create+0x2d/0x40 [ 465.172618][T30771] do_syscall_64+0x44/0xa0 [ 465.177019][T30771] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 465.182898][T30771] RIP: 0033:0x4665f9 [ 465.186886][T30771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 14:34:03 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r2, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 465.206665][T30771] RSP: 002b:00007ff01116ff48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 465.215099][T30771] RAX: ffffffffffffffda RBX: 0000000020000080 RCX: 00000000004665f9 [ 465.223402][T30771] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004bee86 [ 465.231365][T30771] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffffffffffff [ 465.239330][T30771] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 465.247460][T30771] R13: 00000000200003c0 R14: 0000000008100000 R15: 00000000200004c0 [ 465.291208][T30780] FAULT_INJECTION: forcing a failure. [ 465.291208][T30780] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 465.304360][T30780] CPU: 0 PID: 30780 Comm: syz-executor.5 Not tainted 5.14.0-syzkaller #0 [ 465.312794][T30780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 465.322931][T30780] Call Trace: [ 465.326210][T30780] dump_stack_lvl+0xd6/0x122 [ 465.330827][T30780] dump_stack+0x11/0x1b [ 465.335058][T30780] should_fail+0x23c/0x250 [ 465.339559][T30780] should_fail_usercopy+0x16/0x20 [ 465.344688][T30780] _copy_to_user+0x1c/0x90 [ 465.349118][T30780] simple_read_from_buffer+0xab/0x120 [ 465.354576][T30780] proc_fail_nth_read+0x10d/0x150 [ 465.359626][T30780] ? proc_fault_inject_write+0x230/0x230 [ 465.365273][T30780] vfs_read+0x1e6/0x750 [ 465.369449][T30780] ? __fget_light+0x21b/0x260 [ 465.374286][T30780] ? __cond_resched+0x11/0x40 [ 465.379504][T30780] ksys_read+0xd9/0x190 [ 465.383670][T30780] __x64_sys_read+0x3e/0x50 [ 465.388183][T30780] do_syscall_64+0x44/0xa0 [ 465.392613][T30780] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 465.398522][T30780] RIP: 0033:0x41937c [ 465.402415][T30780] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 465.422029][T30780] RSP: 002b:00007fa3734e3170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 465.430443][T30780] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000041937c [ 465.438596][T30780] RDX: 000000000000000f RSI: 00007fa3734e31e0 RDI: 0000000000000005 [ 465.446683][T30780] RBP: 00007fa3734e31d0 R08: 0000000000000000 R09: 0000000000000000 [ 465.454722][T30780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 465.462697][T30780] R13: 00007ffd7124940f R14: 00007fa3734e3300 R15: 0000000000022000 [ 465.478699][T30779] loop3: detected capacity change from 0 to 264192 14:34:04 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000) lseek(0xffffffffffffffff, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r1, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 465.487776][T30785] loop4: detected capacity change from 0 to 264192 [ 465.509651][T30796] loop2: detected capacity change from 0 to 264192 14:34:04 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x0) [ 465.603182][T30808] loop3: detected capacity change from 0 to 264192 14:34:04 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x2) 14:34:04 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000) lseek(0xffffffffffffffff, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r1, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 465.815531][T30824] loop3: detected capacity change from 0 to 264192 14:34:04 executing program 0 (fault-call:1 fault-nth:0): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 14:34:04 executing program 1 (fault-call:1 fault-nth:5): set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) 14:34:04 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x4) [ 466.047486][T30834] FAULT_INJECTION: forcing a failure. [ 466.047486][T30834] name failslab, interval 1, probability 0, space 0, times 0 [ 466.060236][T30834] CPU: 0 PID: 30834 Comm: syz-executor.1 Not tainted 5.14.0-syzkaller #0 [ 466.068742][T30834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 466.078801][T30834] Call Trace: [ 466.082070][T30834] dump_stack_lvl+0xd6/0x122 [ 466.086652][T30834] dump_stack+0x11/0x1b [ 466.090873][T30834] should_fail+0x23c/0x250 [ 466.095305][T30834] ? __alloc_file+0x2e/0x1a0 [ 466.099893][T30834] __should_failslab+0x81/0x90 [ 466.104854][T30834] should_failslab+0x5/0x20 [ 466.109405][T30834] kmem_cache_alloc+0x4f/0x300 [ 466.114296][T30834] __alloc_file+0x2e/0x1a0 [ 466.118830][T30834] alloc_empty_file+0xcd/0x1c0 [ 466.123593][T30834] alloc_file+0x3a/0x280 [ 466.129385][T30834] alloc_file_pseudo+0xfa/0x150 [ 466.134463][T30834] __shmem_file_setup+0x14c/0x1d0 [ 466.139473][T30834] shmem_file_setup+0x37/0x40 [ 466.144382][T30834] __se_sys_memfd_create+0x1eb/0x390 [ 466.149654][T30834] __x64_sys_memfd_create+0x2d/0x40 [ 466.154964][T30834] do_syscall_64+0x44/0xa0 [ 466.159600][T30834] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 466.165500][T30834] RIP: 0033:0x4665f9 [ 466.169389][T30834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 466.189785][T30834] RSP: 002b:00007ff01116ff48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f 14:34:04 executing program 2: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r6, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r9}, {}, {r8}, {r8}, {r8}, {}, {}, {0x0, r9}, {}, {0x0, r2}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r8, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {r8}, {}, {0x0, r9}, {r8, r9}, {0x0, r9}, {r7}, {}, {0x0, r9}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {r7}, {}, {r8}, {r7}, {}, {r8, r9}, {}, {r3, r9}, {0x0, r9}, {}, {}, {r8}, {}, {0x0, r9}, {0x0, r9}, {r8}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {r8}, {}, {0x0, r9}, {r7}, {r8, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8, r9}, {r7, r9}, {r8}, {}, {r7}, {r7}, {}, {}, {r7}, {}, {}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r7, r9}, {}, {}, {}, {r8}, {}, {}, {}, {r7}, {}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {r7}, {}, {}, {}, {0x0, r9}, {r7, r9}, {r8}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {r7}, {r8}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {r8}, {r7, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {0x0, r9}, {r8}, {}, {}, {r7}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {r8}, {r8, r9}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {r8}, {0x0, r9}, {}, {r8}, {r8}, {0x0, r4}, {}, {}, {}, {}, {0x0, r9}, {r7}, {}, {}, {0x0, r9}, {}, {r8, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {r7, r9}, {}, {}, {r8}, {r7}, {0x0, r9}, {}, {0x0, r9}, {r8}, {r8}, {r7}, {}, {0x0, r9}, {r8}], 0x1, "2156816c73038c"}) r10 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r10, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 466.198198][T30834] RAX: ffffffffffffffda RBX: 0000000020000080 RCX: 00000000004665f9 [ 466.206207][T30834] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004bee86 [ 466.214161][T30834] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffffffffffff [ 466.222151][T30834] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 466.230105][T30834] R13: 00000000200003c0 R14: 0000000008100000 R15: 00000000200004c0 14:34:04 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x8, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{0x0, r6}, {}, {r5}, {r5}, {r5}, {}, {}, {0x0, r6}, {}, {0x0, r1}, {}, {}, {r4, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {r5}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r4}, {}, {0x0, r6}, {r5}, {}, {}, {r5}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {r5, r6}, {}, {r2, r6}, {0x0, r6}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {r5}, {}, {0x0, r6}, {r4}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {r4, r6}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {}, {}, {r5}, {}, {}, {0x0, r6}, {r4}, {}, {r5}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {r5}, {}, {}, {}, {r4}, {r4}, {}, {r4}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {}, {}, {r4}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r4}, {r5}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {r5}, {r5}, {0x0, r3}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {r4}, {}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {r4, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {r5}, {r4}, {}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {}, {r4, r6}], 0x1, "2156816c73038c"}) r7 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:34:04 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000) lseek(0xffffffffffffffff, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r1, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 466.310903][T30843] loop3: detected capacity change from 0 to 264192 [ 466.320567][ T22] audit: type=1326 audit(1631457244.917:95860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=30840 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x0 [ 466.364260][T30852] loop4: detected capacity change from 0 to 264192 14:34:05 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r2, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 466.407170][T30858] loop2: detected capacity change from 0 to 264192 14:34:05 executing program 1 (fault-call:1 fault-nth:6): set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) [ 466.458075][T30862] loop3: detected capacity change from 0 to 264192 [ 466.539312][T30873] FAULT_INJECTION: forcing a failure. [ 466.539312][T30873] name failslab, interval 1, probability 0, space 0, times 0 [ 466.551981][T30873] CPU: 1 PID: 30873 Comm: syz-executor.1 Not tainted 5.14.0-syzkaller #0 [ 466.560408][T30873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 466.570503][T30873] Call Trace: [ 466.573816][T30873] dump_stack_lvl+0xd6/0x122 [ 466.578501][T30873] dump_stack+0x11/0x1b [ 466.582749][T30873] should_fail+0x23c/0x250 [ 466.587268][T30873] ? security_file_alloc+0x30/0x190 [ 466.592544][T30873] __should_failslab+0x81/0x90 [ 466.597498][T30873] should_failslab+0x5/0x20 [ 466.602090][T30873] kmem_cache_alloc+0x4f/0x300 [ 466.607541][T30873] security_file_alloc+0x30/0x190 [ 466.612806][T30873] __alloc_file+0x83/0x1a0 [ 466.617326][T30873] alloc_empty_file+0xcd/0x1c0 [ 466.622138][T30873] alloc_file+0x3a/0x280 [ 466.626384][T30873] alloc_file_pseudo+0xfa/0x150 [ 466.631247][T30873] __shmem_file_setup+0x14c/0x1d0 [ 466.636339][T30873] shmem_file_setup+0x37/0x40 [ 466.641015][T30873] __se_sys_memfd_create+0x1eb/0x390 [ 466.646335][T30873] __x64_sys_memfd_create+0x2d/0x40 [ 466.651545][T30873] do_syscall_64+0x44/0xa0 [ 466.655970][T30873] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 466.661877][T30873] RIP: 0033:0x4665f9 [ 466.665773][T30873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 14:34:05 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x7) 14:34:05 executing program 2: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r6, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r9}, {}, {r8}, {r8}, {r8}, {}, {}, {0x0, r9}, {}, {0x0, r2}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r8, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {r8}, {}, {0x0, r9}, {r8, r9}, {0x0, r9}, {r7}, {}, {0x0, r9}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {r7}, {}, {r8}, {r7}, {}, {r8, r9}, {}, {r3, r9}, {0x0, r9}, {}, {}, {r8}, {}, {0x0, r9}, {0x0, r9}, {r8}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {r8}, {}, {0x0, r9}, {r7}, {r8, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8, r9}, {r7, r9}, {r8}, {}, {r7}, {r7}, {}, {}, {r7}, {}, {}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r7, r9}, {}, {}, {}, {r8}, {}, {}, {}, {r7}, {}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {r7}, {}, {}, {}, {0x0, r9}, {r7, r9}, {r8}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {r7}, {r8}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {r8}, {r7, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {0x0, r9}, {r8}, {}, {}, {r7}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {r8}, {r8, r9}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {r8}, {0x0, r9}, {}, {r8}, {r8}, {0x0, r4}, {}, {}, {}, {}, {0x0, r9}, {r7}, {}, {}, {0x0, r9}, {}, {r8, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {r7, r9}, {}, {}, {r8}, {r7}, {0x0, r9}, {}, {0x0, r9}, {r8}, {r8}, {r7}, {}, {0x0, r9}, {r8}], 0x1, "2156816c73038c"}) r10 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r10, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 466.685476][T30873] RSP: 002b:00007ff01116ff48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 466.693895][T30873] RAX: ffffffffffffffda RBX: 0000000020000080 RCX: 00000000004665f9 [ 466.701864][T30873] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004bee86 [ 466.709834][T30873] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffffffffffff [ 466.717810][T30873] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 466.725785][T30873] R13: 00000000200003c0 R14: 0000000008100000 R15: 00000000200004c0 14:34:05 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r2, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:34:05 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0xf) [ 466.868670][T30893] loop3: detected capacity change from 0 to 264192 [ 466.899195][T30897] loop2: detected capacity change from 0 to 264192 [ 466.910436][ C1] scsi_io_completion_action: 17 callbacks suppressed [ 466.910473][ C1] sd 0:0:1:0: tag#491 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 466.928678][ C1] sd 0:0:1:0: tag#491 CDB: opcode=0xe5 (vendor) [ 466.934944][ C1] sd 0:0:1:0: tag#491 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 466.943918][ C1] sd 0:0:1:0: tag#491 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 466.952891][ C1] sd 0:0:1:0: tag#491 CDB[20]: ba [ 466.998283][ C0] sd 0:0:1:0: tag#492 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 467.008140][ C0] sd 0:0:1:0: tag#492 CDB: opcode=0xe5 (vendor) [ 467.014409][ C0] sd 0:0:1:0: tag#492 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 467.023387][ C0] sd 0:0:1:0: tag#492 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 467.032430][ C0] sd 0:0:1:0: tag#492 CDB[20]: ba 14:34:05 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 14:34:05 executing program 1 (fault-call:1 fault-nth:7): set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) 14:34:05 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x10) 14:34:05 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x8, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{0x0, r6}, {}, {r5}, {r5}, {r5}, {}, {}, {0x0, r6}, {}, {0x0, r1}, {}, {}, {r4, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {r5}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r4}, {}, {0x0, r6}, {r5}, {}, {}, {r5}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {r5, r6}, {}, {r2, r6}, {0x0, r6}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {r5}, {}, {0x0, r6}, {r4}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {r4, r6}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {}, {}, {r5}, {}, {}, {0x0, r6}, {r4}, {}, {r5}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {r5}, {}, {}, {}, {r4}, {r4}, {}, {r4}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {}, {}, {r4}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r4}, {r5}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {r5}, {r5}, {0x0, r3}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {r4}, {}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {r4, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {r5}, {r4}, {}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {}, {r4, r6}], 0x1, "2156816c73038c"}) r7 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:34:05 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r2, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 467.169379][ T22] audit: type=1326 audit(1631457245.767:95861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=30913 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x0 [ 467.171366][T30915] loop4: detected capacity change from 0 to 264192 [ 467.205639][T30918] FAULT_INJECTION: forcing a failure. [ 467.205639][T30918] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 467.219006][T30918] CPU: 0 PID: 30918 Comm: syz-executor.1 Not tainted 5.14.0-syzkaller #0 [ 467.227977][T30918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 467.238103][T30918] Call Trace: [ 467.241388][T30918] dump_stack_lvl+0xd6/0x122 [ 467.246069][T30918] dump_stack+0x11/0x1b [ 467.250236][T30918] should_fail+0x23c/0x250 [ 467.254683][T30918] __alloc_pages+0x102/0x320 [ 467.259293][T30918] alloc_pages_vma+0x5ee/0x770 [ 467.264226][T30918] shmem_getpage_gfp+0x96d/0x13d0 [ 467.269259][T30918] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 467.275435][T30918] shmem_write_begin+0x7e/0x100 [ 467.280453][T30918] generic_perform_write+0x1b8/0x3e0 [ 467.285867][T30918] __generic_file_write_iter+0x174/0x310 [ 467.291518][T30918] generic_file_write_iter+0x75/0x130 [ 467.297005][T30918] vfs_write+0x79c/0x8d0 [ 467.301273][T30918] __x64_sys_pwrite64+0xf5/0x150 [ 467.306385][T30918] do_syscall_64+0x44/0xa0 [ 467.310834][T30918] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 467.316721][T30918] RIP: 0033:0x419797 [ 467.320606][T30918] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 467.340307][T30918] RSP: 002b:00007ff01116ff20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 467.349106][T30918] RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 0000000000419797 [ 467.357145][T30918] RDX: 0000000000000017 RSI: 00000000200000c0 RDI: 0000000000000004 [ 467.365139][T30918] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffffffffffff [ 467.373186][T30918] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 467.381145][T30918] R13: 0000000000000004 R14: 0000000020000080 R15: 0000000000000000 14:34:06 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x408) 14:34:06 executing program 2: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r6, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r9}, {}, {r8}, {r8}, {r8}, {}, {}, {0x0, r9}, {}, {0x0, r2}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r8, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {r8}, {}, {0x0, r9}, {r8, r9}, {0x0, r9}, {r7}, {}, {0x0, r9}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {r7}, {}, {r8}, {r7}, {}, {r8, r9}, {}, {r3, r9}, {0x0, r9}, {}, {}, {r8}, {}, {0x0, r9}, {0x0, r9}, {r8}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {r8}, {}, {0x0, r9}, {r7}, {r8, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8, r9}, {r7, r9}, {r8}, {}, {r7}, {r7}, {}, {}, {r7}, {}, {}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r7, r9}, {}, {}, {}, {r8}, {}, {}, {}, {r7}, {}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {r7}, {}, {}, {}, {0x0, r9}, {r7, r9}, {r8}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {r7}, {r8}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {r8}, {r7, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {0x0, r9}, {r8}, {}, {}, {r7}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {r8}, {r8, r9}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {r8}, {0x0, r9}, {}, {r8}, {r8}, {0x0, r4}, {}, {}, {}, {}, {0x0, r9}, {r7}, {}, {}, {0x0, r9}, {}, {r8, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {r7, r9}, {}, {}, {r8}, {r7}, {0x0, r9}, {}, {0x0, r9}, {r8}, {r8}, {r7}, {}, {0x0, r9}, {r8}], 0x1, "2156816c73038c"}) r10 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r10, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:34:06 executing program 1 (fault-call:1 fault-nth:8): set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) [ 467.437198][T30929] loop3: detected capacity change from 0 to 264192 [ 467.517445][T30940] FAULT_INJECTION: forcing a failure. [ 467.517445][T30940] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 467.530533][T30940] CPU: 1 PID: 30940 Comm: syz-executor.1 Not tainted 5.14.0-syzkaller #0 [ 467.539010][T30940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 467.549151][T30940] Call Trace: [ 467.552426][T30940] dump_stack_lvl+0xd6/0x122 [ 467.557041][T30940] dump_stack+0x11/0x1b [ 467.561195][T30940] should_fail+0x23c/0x250 [ 467.565619][T30940] should_fail_usercopy+0x16/0x20 [ 467.570686][T30940] copy_page_from_iter_atomic+0x2c1/0xbb0 [ 467.576400][T30940] ? shmem_write_begin+0x7e/0x100 [ 467.581430][T30940] generic_perform_write+0x201/0x3e0 [ 467.586852][T30940] __generic_file_write_iter+0x174/0x310 [ 467.592584][T30940] generic_file_write_iter+0x75/0x130 [ 467.598099][T30940] vfs_write+0x79c/0x8d0 [ 467.602341][T30940] __x64_sys_pwrite64+0xf5/0x150 [ 467.607369][T30940] do_syscall_64+0x44/0xa0 [ 467.611787][T30940] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 467.617722][T30940] RIP: 0033:0x419797 [ 467.621616][T30940] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 467.641224][T30940] RSP: 002b:00007ff01116ff20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 467.649758][T30940] RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 0000000000419797 [ 467.657901][T30940] RDX: 0000000000000017 RSI: 00000000200000c0 RDI: 0000000000000004 [ 467.665941][T30940] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffffffffffff [ 467.673907][T30940] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 467.681880][T30940] R13: 0000000000000004 R14: 0000000020000080 R15: 0000000000000000 [ 467.694992][ C0] sd 0:0:1:0: tag#493 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 467.704862][ C0] sd 0:0:1:0: tag#493 CDB: opcode=0xe5 (vendor) 14:34:06 executing program 1 (fault-call:1 fault-nth:9): set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) [ 467.711140][ C0] sd 0:0:1:0: tag#493 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 467.720285][ C0] sd 0:0:1:0: tag#493 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 467.729898][ C0] sd 0:0:1:0: tag#493 CDB[20]: ba [ 467.787016][T30944] FAULT_INJECTION: forcing a failure. [ 467.787016][T30944] name failslab, interval 1, probability 0, space 0, times 0 [ 467.799736][T30944] CPU: 0 PID: 30944 Comm: syz-executor.1 Not tainted 5.14.0-syzkaller #0 [ 467.808163][T30944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 467.818337][T30944] Call Trace: [ 467.821618][T30944] dump_stack_lvl+0xd6/0x122 [ 467.826216][T30944] dump_stack+0x11/0x1b [ 467.830378][T30944] should_fail+0x23c/0x250 14:34:06 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x8, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{0x0, r6}, {}, {r5}, {r5}, {r5}, {}, {}, {0x0, r6}, {}, {0x0, r1}, {}, {}, {r4, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {r5}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r4}, {}, {0x0, r6}, {r5}, {}, {}, {r5}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {r5, r6}, {}, {r2, r6}, {0x0, r6}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {r5}, {}, {0x0, r6}, {r4}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {r4, r6}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {}, {}, {r5}, {}, {}, {0x0, r6}, {r4}, {}, {r5}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {r5}, {}, {}, {}, {r4}, {r4}, {}, {r4}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {}, {}, {r4}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r4}, {r5}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {r5}, {r5}, {0x0, r3}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {r4}, {}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {r4, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {r5}, {r4}, {}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {}, {r4, r6}], 0x1, "2156816c73038c"}) r7 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:34:06 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r2, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 467.834893][T30944] ? getname_flags+0x84/0x3f0 [ 467.839836][T30944] __should_failslab+0x81/0x90 [ 467.844689][T30944] should_failslab+0x5/0x20 [ 467.849220][T30944] kmem_cache_alloc+0x4f/0x300 [ 467.853996][T30944] getname_flags+0x84/0x3f0 [ 467.858552][T30944] getname+0x15/0x20 [ 467.862459][T30944] do_sys_openat2+0x6d/0x2b0 [ 467.867169][T30944] __x64_sys_openat+0xef/0x110 [ 467.872030][T30944] do_syscall_64+0x44/0xa0 [ 467.876466][T30944] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 467.882363][T30944] RIP: 0033:0x4196e4 [ 467.886328][T30944] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 467.905937][T30944] RSP: 002b:00007ff01116fed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 467.914606][T30944] RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 00000000004196e4 [ 467.922579][T30944] RDX: 0000000000000002 RSI: 00007ff011170000 RDI: 00000000ffffff9c 14:34:06 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x700) [ 467.930555][T30944] RBP: 00007ff011170000 R08: 0000000000000000 R09: ffffffffffffffff [ 467.939363][T30944] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 467.947444][T30944] R13: 0000000000000004 R14: 0000000020000098 R15: 0000000000000001 [ 467.993406][T30952] loop2: detected capacity change from 0 to 264192 [ 468.012933][ C0] sd 0:0:1:0: tag#494 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 468.022724][ C0] sd 0:0:1:0: tag#494 CDB: opcode=0xe5 (vendor) [ 468.029007][ C0] sd 0:0:1:0: tag#494 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c 14:34:06 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 14:34:06 executing program 1 (fault-call:1 fault-nth:10): set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) 14:34:06 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x804) [ 468.037970][ C0] sd 0:0:1:0: tag#494 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 468.046997][ C0] sd 0:0:1:0: tag#494 CDB[20]: ba [ 468.068060][ T22] audit: type=1326 audit(1631457246.667:95862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=30957 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x0 [ 468.129900][T30960] loop3: detected capacity change from 0 to 264192 [ 468.144314][ C0] sd 0:0:1:0: tag#495 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 468.154089][ C0] sd 0:0:1:0: tag#495 CDB: opcode=0xe5 (vendor) [ 468.160421][ C0] sd 0:0:1:0: tag#495 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 468.163097][T30973] FAULT_INJECTION: forcing a failure. [ 468.163097][T30973] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 468.169391][ C0] sd 0:0:1:0: tag#495 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 468.182420][T30973] CPU: 1 PID: 30973 Comm: syz-executor.1 Not tainted 5.14.0-syzkaller #0 [ 468.191543][ C0] sd 0:0:1:0: tag#495 CDB[20]: ba [ 468.199915][T30973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 468.215152][T30973] Call Trace: [ 468.218450][T30973] dump_stack_lvl+0xd6/0x122 [ 468.223047][T30973] dump_stack+0x11/0x1b [ 468.227207][T30973] should_fail+0x23c/0x250 [ 468.231632][T30973] should_fail_usercopy+0x16/0x20 [ 468.236658][T30973] strncpy_from_user+0x21/0x250 [ 468.241509][T30973] getname_flags+0xb8/0x3f0 [ 468.246016][T30973] getname+0x15/0x20 [ 468.250001][T30973] do_sys_openat2+0x6d/0x2b0 [ 468.254596][T30973] __x64_sys_openat+0xef/0x110 [ 468.259582][T30973] do_syscall_64+0x44/0xa0 [ 468.263996][T30973] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 468.269901][T30973] RIP: 0033:0x4196e4 [ 468.273804][T30973] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 468.293415][T30973] RSP: 002b:00007ff01116fed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 468.301955][T30973] RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 00000000004196e4 [ 468.310444][T30973] RDX: 0000000000000002 RSI: 00007ff011170000 RDI: 00000000ffffff9c [ 468.318483][T30973] RBP: 00007ff011170000 R08: 0000000000000000 R09: ffffffffffffffff 14:34:06 executing program 2: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r6, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r9}, {}, {r8}, {r8}, {r8}, {}, {}, {0x0, r9}, {}, {0x0, r2}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r8, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {r8}, {}, {0x0, r9}, {r8, r9}, {0x0, r9}, {r7}, {}, {0x0, r9}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {r7}, {}, {r8}, {r7}, {}, {r8, r9}, {}, {r3, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {r8}, {}, {0x0, r9}, {r7}, {r8, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8, r9}, {r7, r9}, {r8}, {}, {r7}, {r7}, {}, {}, {r7}, {}, {}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r7, r9}, {}, {}, {}, {r8}, {}, {}, {}, {r7}, {}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {r7}, {}, {}, {}, {0x0, r9}, {r7, r9}, {r8}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {r7}, {r8}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {r8}, {r7, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {0x0, r9}, {r8}, {}, {}, {r7}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {r8}, {r8, r9}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {r8}, {0x0, r9}, {}, {r8}, {r8}, {0x0, r4}, {}, {}, {}, {}, {0x0, r9}, {r7}, {}, {}, {0x0, r9}, {}, {r8, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {r7, r9}, {}, {}, {r8}, {r7}, {0x0, r9}, {}, {0x0, r9}, {r8}, {r8}, {r7}, {}, {0x0, r9}, {r8}], 0x1, "2156816c73038c"}) r10 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r10, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 468.326457][T30973] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 468.334508][T30973] R13: 0000000000000004 R14: 0000000020000098 R15: 0000000000000001 14:34:07 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0xf00) [ 468.380672][T30979] loop4: detected capacity change from 0 to 264192 14:34:07 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x2000) [ 468.476634][T30991] loop2: detected capacity change from 0 to 264192 14:34:07 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x8, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{0x0, r6}, {}, {r5}, {r5}, {r5}, {}, {}, {0x0, r6}, {}, {0x0, r1}, {}, {}, {r4, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {r5}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r4}, {}, {0x0, r6}, {r5}, {}, {}, {r5}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {r5, r6}, {}, {r2, r6}, {0x0, r6}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {r5}, {}, {0x0, r6}, {r4}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {r4, r6}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {}, {}, {r5}, {}, {}, {0x0, r6}, {r4}, {}, {r5}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {r5}, {}, {}, {}, {r4}, {r4}, {}, {r4}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {}, {}, {r4}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r4}, {r5}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {r5}, {r5}, {0x0, r3}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {r4}, {}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {r4, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {r5}, {r4}, {}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {}, {r4, r6}], 0x1, "2156816c73038c"}) r7 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:34:07 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0xff0f) 14:34:07 executing program 1 (fault-call:1 fault-nth:11): set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) [ 468.538991][ C1] sd 0:0:1:0: tag#496 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 468.549198][ C1] sd 0:0:1:0: tag#496 CDB: opcode=0xe5 (vendor) [ 468.555455][ C1] sd 0:0:1:0: tag#496 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 468.564542][ C1] sd 0:0:1:0: tag#496 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 468.573602][ C1] sd 0:0:1:0: tag#496 CDB[20]: ba [ 468.635345][T31005] FAULT_INJECTION: forcing a failure. [ 468.635345][T31005] name failslab, interval 1, probability 0, space 0, times 0 [ 468.648094][T31005] CPU: 1 PID: 31005 Comm: syz-executor.1 Not tainted 5.14.0-syzkaller #0 [ 468.656505][T31005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 468.666553][T31005] Call Trace: [ 468.669981][T31005] dump_stack_lvl+0xd6/0x122 [ 468.674635][T31005] dump_stack+0x11/0x1b [ 468.678810][T31005] should_fail+0x23c/0x250 [ 468.683311][T31005] ? __alloc_file+0x2e/0x1a0 [ 468.687974][T31005] __should_failslab+0x81/0x90 [ 468.692776][T31005] should_failslab+0x5/0x20 [ 468.697444][T31005] kmem_cache_alloc+0x4f/0x300 [ 468.702282][T31005] __alloc_file+0x2e/0x1a0 [ 468.706851][T31005] alloc_empty_file+0xcd/0x1c0 [ 468.711608][T31005] path_openat+0x6a/0x1ec0 [ 468.716052][T31005] ? copy_page_from_iter_atomic+0x44b/0xbb0 [ 468.721932][T31005] ? set_page_dirty+0xf4/0x1a0 [ 468.726690][T31005] ? shmem_write_end+0x37d/0x3d0 [ 468.731624][T31005] ? balance_dirty_pages_ratelimited+0xc4/0x2a0 [ 468.737863][T31005] ? generic_perform_write+0x377/0x3e0 [ 468.743320][T31005] do_filp_open+0x105/0x220 [ 468.747846][T31005] do_sys_openat2+0xb5/0x2b0 [ 468.752430][T31005] __x64_sys_openat+0xef/0x110 [ 468.757210][T31005] do_syscall_64+0x44/0xa0 [ 468.761631][T31005] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 468.767621][T31005] RIP: 0033:0x4196e4 [ 468.771593][T31005] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 468.791402][T31005] RSP: 002b:00007ff01116fed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 468.799820][T31005] RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 00000000004196e4 [ 468.807785][T31005] RDX: 0000000000000002 RSI: 00007ff011170000 RDI: 00000000ffffff9c [ 468.816198][T31005] RBP: 00007ff011170000 R08: 0000000000000000 R09: ffffffffffffffff [ 468.824240][T31005] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 468.832302][T31005] R13: 0000000000000004 R14: 0000000020000098 R15: 0000000000000001 14:34:07 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000000) 14:34:07 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r2, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:34:07 executing program 1 (fault-call:1 fault-nth:12): set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) [ 468.902488][ T22] audit: type=1326 audit(1631457247.497:95863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=30957 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x0 [ 468.960051][T31018] FAULT_INJECTION: forcing a failure. [ 468.960051][T31018] name failslab, interval 1, probability 0, space 0, times 0 [ 468.972762][T31018] CPU: 1 PID: 31018 Comm: syz-executor.1 Not tainted 5.14.0-syzkaller #0 [ 468.981185][T31018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 468.991244][T31018] Call Trace: [ 468.994556][T31018] dump_stack_lvl+0xd6/0x122 [ 468.999221][T31018] dump_stack+0x11/0x1b [ 469.003530][T31018] should_fail+0x23c/0x250 [ 469.005921][T31022] loop3: detected capacity change from 0 to 264192 [ 469.007941][T31018] ? security_file_alloc+0x30/0x190 [ 469.007967][T31018] __should_failslab+0x81/0x90 [ 469.024382][T31018] should_failslab+0x5/0x20 [ 469.028952][T31018] kmem_cache_alloc+0x4f/0x300 [ 469.033723][T31018] security_file_alloc+0x30/0x190 [ 469.038792][T31018] __alloc_file+0x83/0x1a0 [ 469.043223][T31018] alloc_empty_file+0xcd/0x1c0 [ 469.048006][T31018] path_openat+0x6a/0x1ec0 [ 469.052489][T31018] ? copy_page_from_iter_atomic+0x44b/0xbb0 [ 469.058367][T31018] ? set_page_dirty+0xf4/0x1a0 [ 469.063151][T31018] ? shmem_write_end+0x37d/0x3d0 [ 469.068087][T31018] ? balance_dirty_pages_ratelimited+0xc4/0x2a0 [ 469.074322][T31018] ? generic_perform_write+0x377/0x3e0 [ 469.079791][T31018] do_filp_open+0x105/0x220 [ 469.084302][T31018] do_sys_openat2+0xb5/0x2b0 [ 469.088909][T31018] __x64_sys_openat+0xef/0x110 [ 469.093673][T31018] do_syscall_64+0x44/0xa0 [ 469.098078][T31018] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 469.103957][T31018] RIP: 0033:0x4196e4 [ 469.107857][T31018] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 469.127447][T31018] RSP: 002b:00007ff01116fed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 469.135934][T31018] RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 00000000004196e4 [ 469.143905][T31018] RDX: 0000000000000002 RSI: 00007ff011170000 RDI: 00000000ffffff9c [ 469.151873][T31018] RBP: 00007ff011170000 R08: 0000000000000000 R09: ffffffffffffffff [ 469.159858][T31018] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 469.167811][T31018] R13: 0000000000000004 R14: 0000000020000098 R15: 0000000000000001 [ 469.199474][ C0] sd 0:0:1:0: tag#497 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s 14:34:07 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502102, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 14:34:07 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x2000000) 14:34:07 executing program 2: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r6, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r9}, {}, {r8}, {r8}, {r8}, {}, {}, {0x0, r9}, {}, {0x0, r2}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r8, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {r8}, {}, {0x0, r9}, {r8, r9}, {0x0, r9}, {r7}, {}, {0x0, r9}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {r7}, {}, {r8}, {r7}, {}, {r8, r9}, {}, {r3, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {r8}, {}, {0x0, r9}, {r7}, {r8, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8, r9}, {r7, r9}, {r8}, {}, {r7}, {r7}, {}, {}, {r7}, {}, {}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r7, r9}, {}, {}, {}, {r8}, {}, {}, {}, {r7}, {}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {r7}, {}, {}, {}, {0x0, r9}, {r7, r9}, {r8}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {r7}, {r8}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {r8}, {r7, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {0x0, r9}, {r8}, {}, {}, {r7}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {r8}, {r8, r9}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {r8}, {0x0, r9}, {}, {r8}, {r8}, {0x0, r4}, {}, {}, {}, {}, {0x0, r9}, {r7}, {}, {}, {0x0, r9}, {}, {r8, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {r7, r9}, {}, {}, {r8}, {r7}, {0x0, r9}, {}, {0x0, r9}, {r8}, {r8}, {r7}, {}, {0x0, r9}, {r8}], 0x1, "2156816c73038c"}) r10 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r10, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 469.209246][ C0] sd 0:0:1:0: tag#497 CDB: opcode=0xe5 (vendor) [ 469.215503][ C0] sd 0:0:1:0: tag#497 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 469.224478][ C0] sd 0:0:1:0: tag#497 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 469.233438][ C0] sd 0:0:1:0: tag#497 CDB[20]: ba [ 469.249137][T31035] loop4: detected capacity change from 0 to 264192 14:34:07 executing program 1 (fault-call:1 fault-nth:13): set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) [ 469.358274][T31047] FAULT_INJECTION: forcing a failure. [ 469.358274][T31047] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 469.371382][T31047] CPU: 0 PID: 31047 Comm: syz-executor.1 Not tainted 5.14.0-syzkaller #0 [ 469.379811][T31047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 469.389955][T31047] Call Trace: [ 469.393230][T31047] dump_stack_lvl+0xd6/0x122 [ 469.397825][T31047] dump_stack+0x11/0x1b [ 469.401985][T31047] should_fail+0x23c/0x250 [ 469.406402][T31047] should_fail_usercopy+0x16/0x20 [ 469.411423][T31047] _copy_from_user+0x1c/0xd0 [ 469.416017][T31047] get_timespec64+0x45/0xe0 [ 469.420520][T31047] __se_sys_clock_nanosleep+0x10e/0x220 [ 469.426068][T31047] __x64_sys_clock_nanosleep+0x51/0x60 [ 469.431531][T31047] do_syscall_64+0x44/0xa0 [ 469.435955][T31047] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 469.441992][T31047] RIP: 0033:0x48a7c1 [ 469.445881][T31047] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 aa e7 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 e3 e7 ff ff 48 8b 04 24 eb 97 66 2e 0f 1f [ 469.465769][T31047] RSP: 002b:00007ff01116fee0 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 469.474259][T31047] RAX: ffffffffffffffda RBX: 00007ff0111706bc RCX: 000000000048a7c1 [ 469.482583][T31047] RDX: 00007ff01116ff20 RSI: 0000000000000000 RDI: 0000000000000000 [ 469.490556][T31047] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 469.498531][T31047] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000010 [ 469.506576][T31047] R13: 0000000000000004 R14: 0000000020000098 R15: 0000000000000001 [ 469.519280][ T22] audit: type=1326 audit(1631457248.117:95864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=31038 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x0 14:34:08 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x4000000) 14:34:08 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502103, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 14:34:08 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x8, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{0x0, r6}, {}, {r5}, {r5}, {r5}, {}, {}, {0x0, r6}, {}, {0x0, r1}, {}, {}, {r4, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {r5}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r4}, {}, {0x0, r6}, {r5}, {}, {}, {r5}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {r5, r6}, {}, {r2, r6}, {0x0, r6}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {r5}, {}, {0x0, r6}, {r4}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {r4, r6}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {}, {}, {r5}, {}, {}, {0x0, r6}, {r4}, {}, {r5}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {r5}, {}, {}, {}, {r4}, {r4}, {}, {r4}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {}, {}, {r4}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r4}, {r5}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {r5}, {r5}, {0x0, r3}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {r4}, {}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {r4, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {r5}, {r4}, {}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {}, {r4, r6}], 0x1, "2156816c73038c"}) r7 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:34:08 executing program 1 (fault-call:1 fault-nth:14): set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) [ 469.628445][ T22] audit: type=1326 audit(1631457248.227:95865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=31055 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x0 [ 469.667356][T31063] loop2: detected capacity change from 0 to 264192 [ 469.708555][ C0] sd 0:0:1:0: tag#498 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 469.718328][ C0] sd 0:0:1:0: tag#498 CDB: opcode=0xe5 (vendor) [ 469.724576][ C0] sd 0:0:1:0: tag#498 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 469.733535][ C0] sd 0:0:1:0: tag#498 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 469.736944][T31070] FAULT_INJECTION: forcing a failure. [ 469.736944][T31070] name failslab, interval 1, probability 0, space 0, times 0 [ 469.742480][ C0] sd 0:0:1:0: tag#498 CDB[20]: ba [ 469.755355][T31070] CPU: 1 PID: 31070 Comm: syz-executor.1 Not tainted 5.14.0-syzkaller #0 [ 469.768719][T31070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 469.778772][T31070] Call Trace: [ 469.782046][T31070] dump_stack_lvl+0xd6/0x122 [ 469.786638][T31070] dump_stack+0x11/0x1b [ 469.790788][T31070] should_fail+0x23c/0x250 [ 469.795198][T31070] ? inotify_handle_inode_event+0x10b/0x2e0 [ 469.801090][T31070] __should_failslab+0x81/0x90 [ 469.805846][T31070] should_failslab+0x5/0x20 [ 469.810348][T31070] __kmalloc+0x6f/0x350 [ 469.814499][T31070] ? __perf_event_task_sched_out+0xe6b/0xec0 [ 469.820469][T31070] inotify_handle_inode_event+0x10b/0x2e0 [ 469.826266][T31070] ? tsan.module_ctor+0x10/0x10 [ 469.831188][T31070] fsnotify+0x1050/0x11a0 [ 469.835615][T31070] __fsnotify_parent+0x304/0x440 [ 469.840634][T31070] __fput+0x1d7/0x520 [ 469.844792][T31070] ____fput+0x11/0x20 [ 469.849045][T31070] task_work_run+0xae/0x130 [ 469.853587][T31070] exit_to_user_mode_prepare+0x156/0x190 [ 469.859223][T31070] syscall_exit_to_user_mode+0x20/0x40 [ 469.864797][T31070] do_syscall_64+0x50/0xa0 [ 469.869214][T31070] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 469.875133][T31070] RIP: 0033:0x41940b [ 469.879018][T31070] Code: 0f 05 48 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 63 fc ff ff 8b 7c 24 0c 41 89 c0 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 44 89 c7 89 44 24 0c e8 a1 fc ff ff 8b 44 [ 469.898689][T31070] RSP: 002b:00007ff01116ff30 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 14:34:08 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r2, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 469.907148][T31070] RAX: 0000000000000000 RBX: 00007ff0111706bc RCX: 000000000041940b [ 469.915130][T31070] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 469.923087][T31070] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 469.931049][T31070] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000010 [ 469.939080][T31070] R13: 0000000000000004 R14: 0000000020000098 R15: 0000000000000001 14:34:08 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x7000000) 14:34:08 executing program 1 (fault-call:1 fault-nth:15): set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) [ 470.040342][T31087] loop4: detected capacity change from 0 to 264192 [ 470.052115][T31091] FAULT_INJECTION: forcing a failure. [ 470.052115][T31091] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 470.065404][T31091] CPU: 1 PID: 31091 Comm: syz-executor.1 Not tainted 5.14.0-syzkaller #0 [ 470.073979][T31091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 470.084084][T31091] Call Trace: [ 470.087364][T31091] dump_stack_lvl+0xd6/0x122 [ 470.090314][T31096] loop3: detected capacity change from 0 to 264192 [ 470.092004][T31091] dump_stack+0x11/0x1b [ 470.102783][T31091] should_fail+0x23c/0x250 [ 470.107203][T31091] should_fail_usercopy+0x16/0x20 [ 470.112311][T31091] _copy_from_user+0x1c/0xd0 [ 470.116908][T31091] kstrtouint_from_user+0x7e/0x170 [ 470.122141][T31091] ? 0xffffffff81000000 [ 470.126331][T31091] proc_fail_nth_write+0x4b/0x150 [ 470.129781][ C0] sd 0:0:1:0: tag#499 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 470.131378][T31091] ? proc_fail_nth_read+0x150/0x150 [ 470.141195][ C0] sd 0:0:1:0: tag#499 CDB: opcode=0xe5 (vendor) [ 470.146322][T31091] vfs_write+0x27c/0x8d0 [ 470.146348][T31091] ? __fput+0x47a/0x520 [ 470.152566][ C0] sd 0:0:1:0: tag#499 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 470.156777][T31091] ? __fget_light+0x21b/0x260 [ 470.156802][T31091] ? __cond_resched+0x11/0x40 [ 470.160969][ C0] sd 0:0:1:0: tag#499 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 470.169848][T31091] ksys_write+0xd9/0x190 [ 470.169874][T31091] __x64_sys_write+0x3e/0x50 [ 470.174619][ C0] sd 0:0:1:0: tag#499 CDB[20]: ba [ 470.202040][T31091] do_syscall_64+0x44/0xa0 [ 470.206537][T31091] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 470.212438][T31091] RIP: 0033:0x4192df [ 470.216327][T31091] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 14:34:08 executing program 2: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r6, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r9}, {}, {r8}, {r8}, {r8}, {}, {}, {0x0, r9}, {}, {0x0, r2}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r8, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {r8}, {}, {0x0, r9}, {r8, r9}, {0x0, r9}, {r7}, {}, {0x0, r9}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {r7}, {}, {r8}, {r7}, {}, {r8, r9}, {}, {r3, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {r8}, {}, {0x0, r9}, {r7}, {r8, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8, r9}, {r7, r9}, {r8}, {}, {r7}, {r7}, {}, {}, {r7}, {}, {}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r7, r9}, {}, {}, {}, {r8}, {}, {}, {}, {r7}, {}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {r7}, {}, {}, {}, {0x0, r9}, {r7, r9}, {r8}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {r7}, {r8}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {r8}, {r7, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {0x0, r9}, {r8}, {}, {}, {r7}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {r8}, {r8, r9}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {r8}, {0x0, r9}, {}, {r8}, {r8}, {0x0, r4}, {}, {}, {}, {}, {0x0, r9}, {r7}, {}, {}, {0x0, r9}, {}, {r8, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {r7, r9}, {}, {}, {r8}, {r7}, {0x0, r9}, {}, {0x0, r9}, {r8}, {r8}, {r7}, {}, {0x0, r9}, {r8}], 0x1, "2156816c73038c"}) r10 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r10, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 470.235955][T31091] RSP: 002b:00007ff011170170 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 470.244366][T31091] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000004192df [ 470.252335][T31091] RDX: 0000000000000001 RSI: 00007ff0111701e0 RDI: 0000000000000003 [ 470.260300][T31091] RBP: 00007ff0111701d0 R08: 0000000000000000 R09: ffffffffffffffff [ 470.268445][T31091] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 470.276471][T31091] R13: 00007ffdf08995af R14: 00007ff011170300 R15: 0000000000022000 14:34:08 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x8040000) 14:34:09 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x8, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{0x0, r6}, {}, {r5}, {r5}, {r5}, {}, {}, {0x0, r6}, {}, {0x0, r1}, {}, {}, {r4, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {r5}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r4}, {}, {0x0, r6}, {r5}, {}, {}, {r5}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {r5, r6}, {}, {r2, r6}, {0x0, r6}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {r5}, {}, {0x0, r6}, {r4}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {r4, r6}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {}, {}, {r5}, {}, {}, {0x0, r6}, {r4}, {}, {r5}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {r5}, {}, {}, {}, {r4}, {r4}, {}, {r4}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {}, {}, {r4}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r4}, {r5}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {r5}, {r5}, {0x0, r3}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {r4}, {}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {r4, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {r5}, {r4}, {}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {}, {r4, r6}], 0x1, "2156816c73038c"}) r7 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:34:09 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0xf000000) 14:34:09 executing program 1: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) [ 470.436986][T31114] loop2: detected capacity change from 0 to 264192 [ 470.457603][ T22] audit: type=1326 audit(1631457249.058:95866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=31055 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x0 14:34:09 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502104, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 470.533162][ C0] sd 0:0:1:0: tag#500 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 470.542940][ C0] sd 0:0:1:0: tag#500 CDB: opcode=0xe5 (vendor) [ 470.549250][ C0] sd 0:0:1:0: tag#500 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 470.558218][ C0] sd 0:0:1:0: tag#500 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 470.567181][ C0] sd 0:0:1:0: tag#500 CDB[20]: ba 14:34:09 executing program 1: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0x2, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) 14:34:09 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x10000000) [ 470.595713][ T22] audit: type=1326 audit(1631457249.188:95867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=31126 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x0 [ 470.609042][T31132] loop4: detected capacity change from 0 to 264192 14:34:09 executing program 1: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0x2000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) 14:34:09 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x20000000) 14:34:09 executing program 3: chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r2, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:34:09 executing program 1: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x2, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) 14:34:09 executing program 2: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r6, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r9}, {}, {r8}, {r8}, {r8}, {}, {}, {0x0, r9}, {}, {0x0, r2}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r8, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {r8}, {}, {0x0, r9}, {r8, r9}, {0x0, r9}, {r7}, {}, {0x0, r9}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {r7}, {}, {r8}, {r7}, {}, {r8, r9}, {}, {r3, r9}, {}, {}, {}, {r8}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {r8}, {}, {0x0, r9}, {r7}, {r8, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8, r9}, {r7, r9}, {r8}, {}, {r7}, {r7}, {}, {}, {r7}, {}, {}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r7, r9}, {}, {}, {}, {r8}, {}, {}, {}, {r7}, {}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {r7}, {}, {}, {}, {0x0, r9}, {r7, r9}, {r8}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {r7}, {r8}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {r8}, {r7, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {0x0, r9}, {r8}, {}, {}, {r7}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {r8}, {r8, r9}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {r8}, {0x0, r9}, {}, {r8}, {r8}, {0x0, r4}, {}, {}, {}, {}, {0x0, r9}, {r7}, {}, {}, {0x0, r9}, {}, {r8, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {r7, r9}, {}, {}, {r8}, {r7}, {0x0, r9}, {}, {0x0, r9}, {r8}, {r8}, {r7}, {}, {0x0, r9}, {r8}], 0x1, "2156816c73038c"}) r10 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r10, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:34:09 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x8, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{0x0, r6}, {}, {r5}, {r5}, {r5}, {}, {}, {0x0, r6}, {}, {0x0, r1}, {}, {}, {r4, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {r5}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r4}, {}, {0x0, r6}, {r5}, {}, {}, {r5}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {r5, r6}, {}, {r2, r6}, {0x0, r6}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {r5}, {}, {0x0, r6}, {r4}, {r5}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {r4, r6}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {}, {}, {r5}, {}, {}, {0x0, r6}, {r4}, {}, {r5}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {r5}, {}, {}, {}, {r4}, {r4}, {}, {r4}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {}, {}, {r4}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r4}, {r5}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {r5}, {r5}, {0x0, r3}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {r4}, {}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {r4, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {r5}, {r4}, {}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {}, {r4, r6}], 0x1, "2156816c73038c"}) r7 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:34:09 executing program 1: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x3, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) 14:34:09 executing program 1: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x4, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) 14:34:09 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0xf4ffffff) [ 470.994653][T31166] loop2: detected capacity change from 0 to 264192 [ 471.090727][T31183] loop4: detected capacity change from 0 to 264192 [ 471.425010][ T22] audit: type=1326 audit(1631457250.018:95868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=31126 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x0 14:34:10 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502105, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 14:34:10 executing program 1: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x5, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) 14:34:10 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0xfbffffff) 14:34:10 executing program 2: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r6, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r9}, {}, {r8}, {r8}, {r8}, {}, {}, {0x0, r9}, {}, {0x0, r2}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r8, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {r8}, {}, {0x0, r9}, {r8, r9}, {0x0, r9}, {r7}, {}, {0x0, r9}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {r7}, {}, {r8}, {r7}, {}, {r8, r9}, {}, {r3, r9}, {}, {}, {}, {r8}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {r8}, {}, {0x0, r9}, {r7}, {r8, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8, r9}, {r7, r9}, {r8}, {}, {r7}, {r7}, {}, {}, {r7}, {}, {}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r7, r9}, {}, {}, {}, {r8}, {}, {}, {}, {r7}, {}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {r7}, {}, {}, {}, {0x0, r9}, {r7, r9}, {r8}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {r7}, {r8}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {r8}, {r7, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {0x0, r9}, {r8}, {}, {}, {r7}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {r8}, {r8, r9}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {r8}, {0x0, r9}, {}, {r8}, {r8}, {0x0, r4}, {}, {}, {}, {}, {0x0, r9}, {r7}, {}, {}, {0x0, r9}, {}, {r8, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {r7, r9}, {}, {}, {r8}, {r7}, {0x0, r9}, {}, {0x0, r9}, {r8}, {r8}, {r7}, {}, {0x0, r9}, {r8}], 0x1, "2156816c73038c"}) r10 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r10, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:34:10 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x8, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{0x0, r6}, {}, {r5}, {r5}, {r5}, {}, {}, {0x0, r6}, {}, {0x0, r1}, {}, {}, {r4, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {r5}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r4}, {}, {0x0, r6}, {r5}, {}, {}, {r5}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {r5, r6}, {}, {r2, r6}, {0x0, r6}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {r5}, {}, {0x0, r6}, {r4}, {r5}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {r4, r6}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {}, {}, {r5}, {}, {}, {0x0, r6}, {r4}, {}, {r5}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {r5}, {}, {}, {}, {r4}, {r4}, {}, {r4}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {}, {}, {r4}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r4}, {r5}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {r5}, {r5}, {0x0, r3}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {r4}, {}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {r4, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {r5}, {r4}, {}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {}, {r4, r6}], 0x1, "2156816c73038c"}) r7 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 471.516845][T31205] loop4: detected capacity change from 0 to 264192 [ 471.529471][ T22] audit: type=1326 audit(1631457250.128:95869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=31212 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x0 [ 471.538956][T31216] loop2: detected capacity change from 0 to 264192 14:34:10 executing program 3: chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r2, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:34:10 executing program 1: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x6, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) 14:34:10 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0xfeffffff) 14:34:10 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x8, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{0x0, r6}, {}, {r5}, {r5}, {r5}, {}, {}, {0x0, r6}, {}, {0x0, r1}, {}, {}, {r4, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {r5}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r4}, {}, {0x0, r6}, {r5}, {}, {}, {r5}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {r5, r6}, {}, {r2, r6}, {0x0, r6}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {r5}, {}, {0x0, r6}, {r4}, {r5}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {r4, r6}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {}, {}, {r5}, {}, {}, {0x0, r6}, {r4}, {}, {r5}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {r5}, {}, {}, {}, {r4}, {r4}, {}, {r4}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {}, {}, {r4}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r4}, {r5}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {r5}, {r5}, {0x0, r3}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {r4}, {}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {r4, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {r5}, {r4}, {}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {}, {r4, r6}], 0x1, "2156816c73038c"}) r7 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 471.924479][ C1] scsi_io_completion_action: 3 callbacks suppressed [ 471.924517][ C1] sd 0:0:1:0: tag#504 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 471.932086][T31238] loop4: detected capacity change from 0 to 264192 [ 471.940900][ C1] sd 0:0:1:0: tag#504 CDB: opcode=0xe5 (vendor) [ 471.953618][ C1] sd 0:0:1:0: tag#504 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 471.962650][ C1] sd 0:0:1:0: tag#504 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d 14:34:10 executing program 1: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x7, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) 14:34:10 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0xff0f0000) [ 471.971626][ C1] sd 0:0:1:0: tag#504 CDB[20]: ba 14:34:10 executing program 1: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0xe, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) [ 472.364270][ T22] audit: type=1326 audit(1631457250.958:95870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=31212 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x0 14:34:11 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502106, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 14:34:11 executing program 1: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0xf, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) 14:34:11 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0xffffff7f) 14:34:11 executing program 2: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r6, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r9}, {}, {r8}, {r8}, {r8}, {}, {}, {0x0, r9}, {}, {0x0, r2}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r8, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {r8}, {}, {0x0, r9}, {r8, r9}, {0x0, r9}, {r7}, {}, {0x0, r9}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {r7}, {}, {r8}, {r7}, {}, {r8, r9}, {}, {r3, r9}, {}, {}, {}, {r8}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {r8}, {}, {0x0, r9}, {r7}, {r8, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8, r9}, {r7, r9}, {r8}, {}, {r7}, {r7}, {}, {}, {r7}, {}, {}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r7, r9}, {}, {}, {}, {r8}, {}, {}, {}, {r7}, {}, {r8}, {}, {}, {r8}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {r7}, {}, {}, {}, {0x0, r9}, {r7, r9}, {r8}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {r7}, {r8}, {0x0, r9}, {}, {}, {r7}, {0x0, r9}, {r8}, {r7, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {0x0, r9}, {r8}, {}, {}, {r7}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r7}, {r8}, {r8, r9}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {r8}, {0x0, r9}, {}, {r8}, {r8}, {0x0, r4}, {}, {}, {}, {}, {0x0, r9}, {r7}, {}, {}, {0x0, r9}, {}, {r8, r9}, {r7}, {0x0, r9}, {}, {}, {r7, r9}, {}, {}, {r7, r9}, {}, {}, {r8}, {r7}, {0x0, r9}, {}, {0x0, r9}, {r8}, {r8}, {r7}, {}, {0x0, r9}, {r8}], 0x1, "2156816c73038c"}) r10 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r10, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 472.444147][ T22] audit: type=1326 audit(1631457251.038:95871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=31265 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x0 14:34:11 executing program 1: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x10, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) [ 472.506854][T31275] loop2: detected capacity change from 0 to 264192 [ 472.537789][ C0] sd 0:0:1:0: tag#505 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 472.547573][ C0] sd 0:0:1:0: tag#505 CDB: opcode=0xe5 (vendor) [ 472.553817][ C0] sd 0:0:1:0: tag#505 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 472.562863][ C0] sd 0:0:1:0: tag#505 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 472.571826][ C0] sd 0:0:1:0: tag#505 CDB[20]: ba 14:34:11 executing program 3: chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r2, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:34:11 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0xfffffff4) 14:34:11 executing program 1: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1b, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) 14:34:11 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x8, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{0x0, r6}, {}, {r5}, {r5}, {r5}, {}, {}, {0x0, r6}, {}, {0x0, r1}, {}, {}, {r4, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {r5}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r4}, {}, {0x0, r6}, {r5}, {}, {}, {r5}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {r5, r6}, {}, {r2, r6}, {0x0, r6}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {r5}, {}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {r4, r6}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {}, {}, {r5}, {}, {}, {0x0, r6}, {r4}, {}, {r5}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {r5}, {}, {}, {}, {r4}, {r4}, {}, {r4}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {}, {}, {r4}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r4}, {r5}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {r5}, {r5}, {0x0, r3}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {r4}, {}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {r4, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {r5}, {r4}, {}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {}, {r4, r6}], 0x1, "2156816c73038c"}) r7 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:34:11 executing program 2: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r5, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r8}, {}, {r7}, {r7}, {r7}, {}, {}, {0x0, r8}, {}, {0x0, r2}, {}, {}, {r6, r8}, {0x0, r8}, {}, {r7, r8}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {}, {0x0, r8}, {}, {}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {r7}, {}, {0x0, r8}, {r7, r8}, {0x0, r8}, {r6}, {}, {0x0, r8}, {r7}, {}, {}, {r7}, {0x0, r8}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {r6}, {}, {r7}, {r6}, {}, {r7, r8}, {}, {0x0, r8}, {0x0, r8}, {}, {}, {r7}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {r7}, {}, {0x0, r8}, {r6}, {r7, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7, r8}, {r6, r8}, {r7}, {}, {r6}, {r6}, {}, {}, {r6}, {}, {}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {r6, r8}, {0x0, r8}, {}, {r6, r8}, {}, {}, {}, {r7}, {}, {}, {}, {r6}, {}, {r7}, {}, {}, {r7}, {0x0, r8}, {}, {}, {}, {}, {0x0, r8}, {}, {r6}, {}, {}, {}, {0x0, r8}, {r6, r8}, {r7}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {r6}, {r7}, {0x0, r8}, {}, {}, {r6}, {0x0, r8}, {r7}, {r6, r8}, {0x0, r8}, {}, {0x0, r8}, {}, {}, {0x0, r8}, {r7}, {}, {}, {r6}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {r6}, {r7}, {r7, r8}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {r7}, {0x0, r8}, {}, {r7}, {r7}, {0x0, r3}, {}, {}, {}, {}, {0x0, r8}, {r6}, {}, {}, {0x0, r8}, {}, {r7, r8}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {}, {}, {r6, r8}, {}, {}, {r7}, {r6}, {0x0, r8}, {}, {0x0, r8}, {r7}, {r7}, {r6}, {}, {0x0, r8}, {r7}], 0x1, "2156816c73038c"}) r9 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r9, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:34:11 executing program 1: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0xfe, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) 14:34:11 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0xfffffffb) [ 472.831399][ C1] sd 0:0:1:0: tag#506 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 472.841054][T31303] loop2: detected capacity change from 0 to 264192 [ 472.841182][ C1] sd 0:0:1:0: tag#506 CDB: opcode=0xe5 (vendor) [ 472.853873][ C1] sd 0:0:1:0: tag#506 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 472.862825][ C1] sd 0:0:1:0: tag#506 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 472.871797][ C1] sd 0:0:1:0: tag#506 CDB[20]: ba [ 472.918466][ C0] sd 0:0:1:0: tag#507 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 472.928268][ C0] sd 0:0:1:0: tag#507 CDB: opcode=0xe5 (vendor) [ 472.934529][ C0] sd 0:0:1:0: tag#507 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 472.943517][ C0] sd 0:0:1:0: tag#507 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 472.952475][ C0] sd 0:0:1:0: tag#507 CDB[20]: ba [ 472.970390][T31313] loop4: detected capacity change from 0 to 264192 [ 473.275840][ T22] audit: type=1326 audit(1631457251.878:95872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=31265 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x0 14:34:11 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502107, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 14:34:11 executing program 1: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x300, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) 14:34:11 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0xfffffffe) 14:34:11 executing program 2: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r5, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r8}, {}, {r7}, {r7}, {r7}, {}, {}, {0x0, r8}, {}, {0x0, r2}, {}, {}, {r6, r8}, {0x0, r8}, {}, {r7, r8}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {}, {0x0, r8}, {}, {}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {r7}, {}, {0x0, r8}, {r7, r8}, {0x0, r8}, {r6}, {}, {0x0, r8}, {r7}, {}, {}, {r7}, {0x0, r8}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {r6}, {}, {r7}, {r6}, {}, {r7, r8}, {}, {0x0, r8}, {0x0, r8}, {}, {}, {r7}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {r7}, {}, {0x0, r8}, {r6}, {r7, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7, r8}, {r6, r8}, {r7}, {}, {r6}, {r6}, {}, {}, {r6}, {}, {}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {r6, r8}, {0x0, r8}, {}, {r6, r8}, {}, {}, {}, {r7}, {}, {}, {}, {r6}, {}, {r7}, {}, {}, {r7}, {0x0, r8}, {}, {}, {}, {}, {0x0, r8}, {}, {r6}, {}, {}, {}, {0x0, r8}, {r6, r8}, {r7}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {r6}, {r7}, {0x0, r8}, {}, {}, {r6}, {0x0, r8}, {r7}, {r6, r8}, {0x0, r8}, {}, {0x0, r8}, {}, {}, {0x0, r8}, {r7}, {}, {}, {r6}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {r6}, {r7}, {r7, r8}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {r7}, {0x0, r8}, {}, {r7}, {r7}, {0x0, r3}, {}, {}, {}, {}, {0x0, r8}, {r6}, {}, {}, {0x0, r8}, {}, {r7, r8}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {}, {}, {r6, r8}, {}, {}, {r7}, {r6}, {0x0, r8}, {}, {0x0, r8}, {r7}, {r7}, {r6}, {}, {0x0, r8}, {r7}], 0x1, "2156816c73038c"}) r9 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r9, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:34:11 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x8, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{0x0, r6}, {}, {r5}, {r5}, {r5}, {}, {}, {0x0, r6}, {}, {0x0, r1}, {}, {}, {r4, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {r5}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r4}, {}, {0x0, r6}, {r5}, {}, {}, {r5}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {r5, r6}, {}, {r2, r6}, {0x0, r6}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {r5}, {}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {r4, r6}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {}, {}, {r5}, {}, {}, {0x0, r6}, {r4}, {}, {r5}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {r5}, {}, {}, {}, {r4}, {r4}, {}, {r4}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {}, {}, {r4}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r4}, {r5}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {r5}, {r5}, {0x0, r3}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {r4}, {}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {r4, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {r5}, {r4}, {}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {}, {r4, r6}], 0x1, "2156816c73038c"}) r7 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 473.367520][ T22] audit: type=1326 audit(1631457251.968:95873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=31334 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x0 [ 473.393348][T31342] loop2: detected capacity change from 0 to 264192 [ 473.403624][T31343] loop4: detected capacity change from 0 to 264192 [ 473.466782][ C1] sd 0:0:1:0: tag#508 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 473.476591][ C1] sd 0:0:1:0: tag#508 CDB: opcode=0xe5 (vendor) [ 473.482931][ C1] sd 0:0:1:0: tag#508 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 473.491902][ C1] sd 0:0:1:0: tag#508 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 473.500953][ C1] sd 0:0:1:0: tag#508 CDB[20]: ba 14:34:12 executing program 3: syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r2, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:34:12 executing program 1: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x900, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) 14:34:12 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x100000000000000) 14:34:12 executing program 2: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r5, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r8}, {}, {r7}, {r7}, {r7}, {}, {}, {0x0, r8}, {}, {0x0, r2}, {}, {}, {r6, r8}, {0x0, r8}, {}, {r7, r8}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {}, {0x0, r8}, {}, {}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {r7}, {}, {0x0, r8}, {r7, r8}, {0x0, r8}, {r6}, {}, {0x0, r8}, {r7}, {}, {}, {r7}, {0x0, r8}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {r6}, {}, {r7}, {r6}, {}, {r7, r8}, {}, {0x0, r8}, {0x0, r8}, {}, {}, {r7}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {r7}, {}, {0x0, r8}, {r6}, {r7, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7, r8}, {r6, r8}, {r7}, {}, {r6}, {r6}, {}, {}, {r6}, {}, {}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {r6, r8}, {0x0, r8}, {}, {r6, r8}, {}, {}, {}, {r7}, {}, {}, {}, {r6}, {}, {r7}, {}, {}, {r7}, {0x0, r8}, {}, {}, {}, {}, {0x0, r8}, {}, {r6}, {}, {}, {}, {0x0, r8}, {r6, r8}, {r7}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {r6}, {r7}, {0x0, r8}, {}, {}, {r6}, {0x0, r8}, {r7}, {r6, r8}, {0x0, r8}, {}, {0x0, r8}, {}, {}, {0x0, r8}, {r7}, {}, {}, {r6}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {r6}, {r7}, {r7, r8}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {r7}, {0x0, r8}, {}, {r7}, {r7}, {0x0, r3}, {}, {}, {}, {}, {0x0, r8}, {r6}, {}, {}, {0x0, r8}, {}, {r7, r8}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {}, {}, {r6, r8}, {}, {}, {r7}, {r6}, {0x0, r8}, {}, {0x0, r8}, {r7}, {r7}, {r6}, {}, {0x0, r8}, {r7}], 0x1, "2156816c73038c"}) r9 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r9, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:34:12 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x8, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{0x0, r6}, {}, {r5}, {r5}, {r5}, {}, {}, {0x0, r6}, {}, {0x0, r1}, {}, {}, {r4, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {r5}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r4}, {}, {0x0, r6}, {r5}, {}, {}, {r5}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {r5, r6}, {}, {r2, r6}, {0x0, r6}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {r5}, {}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {r4, r6}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {}, {}, {r5}, {}, {}, {0x0, r6}, {r4}, {}, {r5}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {r5}, {}, {}, {}, {r4}, {r4}, {}, {r4}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {}, {}, {r4}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r4}, {r5}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {r5}, {r5}, {0x0, r3}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {r4}, {}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {r4, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {r5}, {r4}, {}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {}, {r4, r6}], 0x1, "2156816c73038c"}) r7 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:34:12 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x200000000000000) 14:34:12 executing program 1: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0xfffe, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) [ 473.745352][T31372] loop3: detected capacity change from 0 to 264192 [ 473.752489][T31373] loop4: detected capacity change from 0 to 264192 [ 473.788211][ C1] sd 0:0:1:0: tag#509 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 473.797982][ C1] sd 0:0:1:0: tag#509 CDB: opcode=0xe5 (vendor) [ 473.804222][ C1] sd 0:0:1:0: tag#509 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 473.813194][ C1] sd 0:0:1:0: tag#509 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 473.822162][ C1] sd 0:0:1:0: tag#509 CDB[20]: ba [ 473.862888][T31391] loop2: detected capacity change from 0 to 264192 [ 473.922359][ C1] sd 0:0:1:0: tag#510 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 473.932166][ C1] sd 0:0:1:0: tag#510 CDB: opcode=0xe5 (vendor) [ 473.938439][ C1] sd 0:0:1:0: tag#510 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 473.947395][ C1] sd 0:0:1:0: tag#510 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 473.956346][ C1] sd 0:0:1:0: tag#510 CDB[20]: ba [ 474.197105][ T22] audit: type=1326 audit(1631457252.798:95874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=31334 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x0 14:34:12 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502108, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 14:34:12 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x400000000000000) 14:34:12 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x8, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{0x0, r6}, {}, {r5}, {r5}, {r5}, {}, {}, {0x0, r6}, {}, {0x0, r1}, {}, {}, {r4, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {r5}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r4}, {}, {0x0, r6}, {r5}, {}, {}, {r5}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {r5, r6}, {}, {r2, r6}, {0x0, r6}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {r5}, {}, {}, {r4}, {r5, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {r4, r6}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {}, {}, {r5}, {}, {}, {0x0, r6}, {r4}, {}, {r5}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {r5}, {}, {}, {}, {r4}, {r4}, {}, {r4}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {}, {}, {r4}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r4}, {r5}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {r5}, {r5}, {0x0, r3}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {r4}, {}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {r4, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {r5}, {r4}, {}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {}, {r4, r6}], 0x1, "2156816c73038c"}) r7 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:34:12 executing program 2: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r5, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r8}, {}, {r7}, {r7}, {r7}, {}, {}, {0x0, r8}, {}, {0x0, r2}, {}, {}, {r6, r8}, {0x0, r8}, {}, {r7, r8}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {}, {0x0, r8}, {}, {}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {r7}, {}, {0x0, r8}, {r7, r8}, {0x0, r8}, {r6}, {}, {0x0, r8}, {r7}, {}, {}, {r7}, {0x0, r8}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {r6}, {}, {r7}, {r6}, {}, {r7, r8}, {}, {}, {0x0, r8}, {}, {}, {r7}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {r7}, {}, {0x0, r8}, {r6}, {r7, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7, r8}, {r6, r8}, {r7}, {}, {r6}, {r6}, {}, {}, {r6}, {}, {}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {r6, r8}, {0x0, r8}, {}, {r6, r8}, {}, {}, {}, {r7}, {}, {}, {}, {r6}, {}, {r7}, {}, {}, {r7}, {0x0, r8}, {}, {}, {}, {}, {0x0, r8}, {}, {r6}, {}, {}, {}, {0x0, r8}, {r6, r8}, {r7}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {r6}, {r7}, {0x0, r8}, {}, {}, {r6}, {0x0, r8}, {r7}, {r6, r8}, {0x0, r8}, {}, {0x0, r8}, {}, {}, {0x0, r8}, {r7}, {}, {}, {r6}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {r6}, {r7}, {r7, r8}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {r7}, {0x0, r8}, {}, {r7}, {r7}, {0x0, r3}, {}, {}, {}, {}, {0x0, r8}, {r6}, {}, {}, {0x0, r8}, {}, {r7, r8}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {}, {}, {r6, r8}, {}, {}, {r7}, {r6}, {0x0, r8}, {}, {0x0, r8}, {r7}, {r7}, {r6}, {}, {0x0, r8}, {r7}], 0x1, "2156816c73038c"}) r9 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r9, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 474.302207][ T22] audit: type=1326 audit(1631457252.898:95875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=31407 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x0 [ 474.333992][T31408] loop4: detected capacity change from 0 to 264192 14:34:13 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x700000000000000) [ 474.358701][T31419] loop2: detected capacity change from 0 to 264192 [ 474.438128][ C0] sd 0:0:1:0: tag#511 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 474.447921][ C0] sd 0:0:1:0: tag#511 CDB: opcode=0xe5 (vendor) [ 474.454179][ C0] sd 0:0:1:0: tag#511 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 474.463138][ C0] sd 0:0:1:0: tag#511 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 474.472104][ C0] sd 0:0:1:0: tag#511 CDB[20]: ba 14:34:13 executing program 3: syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r2, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:34:13 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x804000000000000) 14:34:13 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x8, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{0x0, r6}, {}, {r5}, {r5}, {r5}, {}, {}, {0x0, r6}, {}, {0x0, r1}, {}, {}, {r4, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {r5}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r4}, {}, {0x0, r6}, {r5}, {}, {}, {r5}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {r5, r6}, {}, {r2, r6}, {0x0, r6}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {r5}, {}, {}, {r4}, {r5, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {r4, r6}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {}, {}, {r5}, {}, {}, {0x0, r6}, {r4}, {}, {r5}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {r5}, {}, {}, {}, {r4}, {r4}, {}, {r4}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {}, {}, {r4}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r4}, {r5}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {r5}, {r5}, {0x0, r3}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {r4}, {}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {r4, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {r5}, {r4}, {}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {}, {r4, r6}], 0x1, "2156816c73038c"}) r7 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:34:13 executing program 1: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1f0448, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) 14:34:13 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0xf00000000000000) [ 474.752085][T31444] loop3: detected capacity change from 0 to 264192 14:34:13 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000000000000000) [ 474.793324][ C1] sd 0:0:1:0: tag#448 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 474.803086][ C1] sd 0:0:1:0: tag#448 CDB: opcode=0xe5 (vendor) [ 474.809351][ C1] sd 0:0:1:0: tag#448 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 474.819608][ C1] sd 0:0:1:0: tag#448 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 474.828565][ C1] sd 0:0:1:0: tag#448 CDB[20]: ba 14:34:13 executing program 2: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r5, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r8}, {}, {r7}, {r7}, {r7}, {}, {}, {0x0, r8}, {}, {0x0, r2}, {}, {}, {r6, r8}, {0x0, r8}, {}, {r7, r8}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {}, {0x0, r8}, {}, {}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {r7}, {}, {0x0, r8}, {r7, r8}, {0x0, r8}, {r6}, {}, {0x0, r8}, {r7}, {}, {}, {r7}, {0x0, r8}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {r6}, {}, {r7}, {r6}, {}, {r7, r8}, {}, {}, {0x0, r8}, {}, {}, {r7}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {r7}, {}, {0x0, r8}, {r6}, {r7, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7, r8}, {r6, r8}, {r7}, {}, {r6}, {r6}, {}, {}, {r6}, {}, {}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {r6, r8}, {0x0, r8}, {}, {r6, r8}, {}, {}, {}, {r7}, {}, {}, {}, {r6}, {}, {r7}, {}, {}, {r7}, {0x0, r8}, {}, {}, {}, {}, {0x0, r8}, {}, {r6}, {}, {}, {}, {0x0, r8}, {r6, r8}, {r7}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {r6}, {r7}, {0x0, r8}, {}, {}, {r6}, {0x0, r8}, {r7}, {r6, r8}, {0x0, r8}, {}, {0x0, r8}, {}, {}, {0x0, r8}, {r7}, {}, {}, {r6}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {r6}, {r7}, {r7, r8}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {r7}, {0x0, r8}, {}, {r7}, {r7}, {0x0, r3}, {}, {}, {}, {}, {0x0, r8}, {r6}, {}, {}, {0x0, r8}, {}, {r7, r8}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {}, {}, {r6, r8}, {}, {}, {r7}, {r6}, {0x0, r8}, {}, {0x0, r8}, {r7}, {r7}, {r6}, {}, {0x0, r8}, {r7}], 0x1, "2156816c73038c"}) r9 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r9, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 474.898615][T31459] loop4: detected capacity change from 0 to 264192 [ 475.024794][T31472] loop2: detected capacity change from 0 to 264192 [ 475.073041][ C0] sd 0:0:1:0: tag#449 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 475.082843][ C0] sd 0:0:1:0: tag#449 CDB: opcode=0xe5 (vendor) [ 475.089109][ C0] sd 0:0:1:0: tag#449 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 475.098090][ C0] sd 0:0:1:0: tag#449 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 475.107065][ C0] sd 0:0:1:0: tag#449 CDB[20]: ba [ 475.129901][ T22] audit: type=1326 audit(1631457253.728:95876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=31407 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x0 14:34:13 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502109, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 14:34:13 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x2000000000000000) 14:34:13 executing program 2: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r5, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r8}, {}, {r7}, {r7}, {r7}, {}, {}, {0x0, r8}, {}, {0x0, r2}, {}, {}, {r6, r8}, {0x0, r8}, {}, {r7, r8}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {}, {0x0, r8}, {}, {}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {r7}, {}, {0x0, r8}, {r7, r8}, {0x0, r8}, {r6}, {}, {0x0, r8}, {r7}, {}, {}, {r7}, {0x0, r8}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {r6}, {}, {r7}, {r6}, {}, {0x0, r8}, {}, {}, {0x0, r8}, {}, {}, {r7}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {r7}, {}, {0x0, r8}, {r6}, {r7, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7, r8}, {r6, r8}, {r7}, {}, {r6}, {r6}, {}, {}, {r6}, {}, {}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {r6, r8}, {0x0, r8}, {}, {r6, r8}, {}, {}, {}, {r7}, {}, {}, {}, {r6}, {}, {r7}, {}, {}, {r7}, {0x0, r8}, {}, {}, {}, {}, {0x0, r8}, {}, {r6}, {}, {}, {}, {0x0, r8}, {r6, r8}, {r7}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {r6}, {r7}, {0x0, r8}, {}, {}, {r6}, {0x0, r8}, {r7}, {r6, r8}, {0x0, r8}, {}, {0x0, r8}, {}, {}, {0x0, r8}, {r7}, {}, {}, {r6}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {r6}, {r7}, {r7, r8}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {r7}, {0x0, r8}, {}, {r7}, {r7}, {0x0, r3}, {}, {}, {}, {}, {0x0, r8}, {r6}, {}, {}, {0x0, r8}, {}, {r7, r8}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {}, {}, {r6, r8}, {}, {}, {r7}, {r6}, {0x0, r8}, {}, {0x0, r8}, {r7}, {r7}, {r6}, {}, {0x0, r8}, {r7}], 0x1, "2156816c73038c"}) r9 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r9, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 475.253234][ T22] audit: type=1326 audit(1631457253.838:95877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=31481 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x0 14:34:13 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x8, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{0x0, r6}, {}, {r5}, {r5}, {r5}, {}, {}, {0x0, r6}, {}, {0x0, r1}, {}, {}, {r4, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {r5}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r4}, {}, {0x0, r6}, {r5}, {}, {}, {r5}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {r5, r6}, {}, {r2, r6}, {0x0, r6}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {r5}, {}, {}, {r4}, {r5, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {r4, r6}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {}, {}, {r5}, {}, {}, {0x0, r6}, {r4}, {}, {r5}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {r5}, {}, {}, {}, {r4}, {r4}, {}, {r4}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {}, {}, {r4}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r4}, {r5}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {r5}, {r5}, {0x0, r3}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {r4}, {}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {r4, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {r5}, {r4}, {}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {}, {r4, r6}], 0x1, "2156816c73038c"}) r7 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:34:13 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0xf4ffffff00000000) [ 475.418990][T31494] loop2: detected capacity change from 0 to 264192 [ 475.488910][T31503] loop4: detected capacity change from 0 to 264192 14:34:14 executing program 3: syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r2, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:34:14 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0xfbffffff00000000) 14:34:14 executing program 1: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) 14:34:14 executing program 2: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r5, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r8}, {}, {r7}, {r7}, {r7}, {}, {}, {0x0, r8}, {}, {0x0, r2}, {}, {}, {r6, r8}, {0x0, r8}, {}, {r7, r8}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {}, {0x0, r8}, {}, {}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {r7}, {}, {0x0, r8}, {r7, r8}, {0x0, r8}, {r6}, {}, {0x0, r8}, {r7}, {}, {}, {r7}, {0x0, r8}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {r6}, {}, {r7}, {r6}, {}, {0x0, r8}, {}, {}, {0x0, r8}, {}, {}, {r7}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {r7}, {}, {0x0, r8}, {r6}, {r7, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7, r8}, {r6, r8}, {r7}, {}, {r6}, {r6}, {}, {}, {r6}, {}, {}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {r6, r8}, {0x0, r8}, {}, {r6, r8}, {}, {}, {}, {r7}, {}, {}, {}, {r6}, {}, {r7}, {}, {}, {r7}, {0x0, r8}, {}, {}, {}, {}, {0x0, r8}, {}, {r6}, {}, {}, {}, {0x0, r8}, {r6, r8}, {r7}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {r6}, {r7}, {0x0, r8}, {}, {}, {r6}, {0x0, r8}, {r7}, {r6, r8}, {0x0, r8}, {}, {0x0, r8}, {}, {}, {0x0, r8}, {r7}, {}, {}, {r6}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {r6}, {r7}, {r7, r8}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {r7}, {0x0, r8}, {}, {r7}, {r7}, {0x0, r3}, {}, {}, {}, {}, {0x0, r8}, {r6}, {}, {}, {0x0, r8}, {}, {r7, r8}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {}, {}, {r6, r8}, {}, {}, {r7}, {r6}, {0x0, r8}, {}, {0x0, r8}, {r7}, {r7}, {r6}, {}, {0x0, r8}, {r7}], 0x1, "2156816c73038c"}) r9 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r9, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:34:14 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0xfeffffff00000000) [ 475.775558][T31526] loop3: detected capacity change from 0 to 264192 14:34:14 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x8, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{0x0, r6}, {}, {r5}, {r5}, {r5}, {}, {}, {0x0, r6}, {}, {0x0, r1}, {}, {}, {r4, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {r5}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r4}, {}, {0x0, r6}, {r5}, {}, {}, {r5}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {r5, r6}, {}, {r2, r6}, {0x0, r6}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4}, {r5, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {r4, r6}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {}, {}, {r5}, {}, {}, {0x0, r6}, {r4}, {}, {r5}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {r5}, {}, {}, {}, {r4}, {r4}, {}, {r4}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {}, {}, {r4}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r4}, {r5}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {r5}, {r5}, {0x0, r3}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {r4}, {}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {r4, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {r5}, {r4}, {}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {}, {r4, r6}], 0x1, "2156816c73038c"}) r7 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:34:14 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0xff0f000000000000) [ 475.867717][T31536] loop2: detected capacity change from 0 to 264192 [ 475.993739][T31553] loop4: detected capacity change from 0 to 264192 14:34:14 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc050210a, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 14:34:14 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0xffffff7f00000000) 14:34:14 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0xffffffff00000000) 14:34:14 executing program 2: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r5, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r8}, {}, {r7}, {r7}, {r7}, {}, {}, {0x0, r8}, {}, {0x0, r2}, {}, {}, {r6, r8}, {0x0, r8}, {}, {r7, r8}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {}, {0x0, r8}, {}, {}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {r7}, {}, {0x0, r8}, {r7, r8}, {0x0, r8}, {r6}, {}, {0x0, r8}, {r7}, {}, {}, {r7}, {0x0, r8}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {r6}, {}, {r7}, {r6}, {}, {0x0, r8}, {}, {}, {0x0, r8}, {}, {}, {r7}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {r7}, {}, {0x0, r8}, {r6}, {r7, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7, r8}, {r6, r8}, {r7}, {}, {r6}, {r6}, {}, {}, {r6}, {}, {}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {r6, r8}, {0x0, r8}, {}, {r6, r8}, {}, {}, {}, {r7}, {}, {}, {}, {r6}, {}, {r7}, {}, {}, {r7}, {0x0, r8}, {}, {}, {}, {}, {0x0, r8}, {}, {r6}, {}, {}, {}, {0x0, r8}, {r6, r8}, {r7}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {r6}, {r7}, {0x0, r8}, {}, {}, {r6}, {0x0, r8}, {r7}, {r6, r8}, {0x0, r8}, {}, {0x0, r8}, {}, {}, {0x0, r8}, {r7}, {}, {}, {r6}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {r6}, {r7}, {r7, r8}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {r7}, {0x0, r8}, {}, {r7}, {r7}, {0x0, r3}, {}, {}, {}, {}, {0x0, r8}, {r6}, {}, {}, {0x0, r8}, {}, {r7, r8}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {}, {}, {r6, r8}, {}, {}, {r7}, {r6}, {0x0, r8}, {}, {0x0, r8}, {r7}, {r7}, {r6}, {}, {0x0, r8}, {r7}], 0x1, "2156816c73038c"}) r9 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r9, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:34:14 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0xffffffffffffffff) [ 476.405820][T31583] loop2: detected capacity change from 0 to 264192 14:34:15 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), 0x0, 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r2, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:34:15 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x81, 0x7f, 0x1, 0x2, 0x0, 0xffffffffffff8001, 0x841, 0x37f3ef37084f2738, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xdc, 0x2, @perf_config_ext={0x800, 0x6eb8000000000000}, 0x8010, 0x8, 0x0, 0x5, 0x5, 0x80000000, 0xfff, 0x0, 0x2, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r0, 0xd) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x0) 14:34:15 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x8, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{0x0, r6}, {}, {r5}, {r5}, {r5}, {}, {}, {0x0, r6}, {}, {0x0, r1}, {}, {}, {r4, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {r5}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r4}, {}, {0x0, r6}, {r5}, {}, {}, {r5}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {r5, r6}, {}, {r2, r6}, {0x0, r6}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4}, {r5, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {r4, r6}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {}, {}, {r5}, {}, {}, {0x0, r6}, {r4}, {}, {r5}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {r5}, {}, {}, {}, {r4}, {r4}, {}, {r4}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {}, {}, {r4}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r4}, {r5}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {r5}, {r5}, {0x0, r3}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {r4}, {}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {r4, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {r5}, {r4}, {}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {}, {r4, r6}], 0x1, "2156816c73038c"}) r7 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:34:15 executing program 1: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0xfffffffffffffffe, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) 14:34:15 executing program 2: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r5, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r8}, {}, {r7}, {r7}, {r7}, {}, {}, {0x0, r8}, {}, {0x0, r2}, {}, {}, {r6, r8}, {0x0, r8}, {}, {r7, r8}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {}, {0x0, r8}, {}, {}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {r7}, {}, {0x0, r8}, {r7, r8}, {0x0, r8}, {r6}, {}, {0x0, r8}, {r7}, {}, {}, {r7}, {0x0, r8}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {r6}, {}, {r7}, {r6}, {}, {r7}, {}, {}, {0x0, r8}, {}, {}, {r7}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {r7}, {}, {0x0, r8}, {r6}, {r7, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7, r8}, {r6, r8}, {r7}, {}, {r6}, {r6}, {}, {}, {r6}, {}, {}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {r6, r8}, {0x0, r8}, {}, {r6, r8}, {}, {}, {}, {r7}, {}, {}, {}, {r6}, {}, {r7}, {}, {}, {r7}, {0x0, r8}, {}, {}, {}, {}, {0x0, r8}, {}, {r6}, {}, {}, {}, {0x0, r8}, {r6, r8}, {r7}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {r6}, {r7}, {0x0, r8}, {}, {}, {r6}, {0x0, r8}, {r7}, {r6, r8}, {0x0, r8}, {}, {0x0, r8}, {}, {}, {0x0, r8}, {r7}, {}, {}, {r6}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {r6}, {r7}, {r7, r8}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {r7}, {0x0, r8}, {}, {r7}, {r7}, {0x0, r3}, {}, {}, {}, {}, {0x0, r8}, {r6}, {}, {}, {0x0, r8}, {}, {r7, r8}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {}, {}, {r6, r8}, {}, {}, {r7}, {r6}, {0x0, r8}, {}, {0x0, r8}, {r7}, {r7}, {r6}, {}, {0x0, r8}, {r7}], 0x1, "2156816c73038c"}) r9 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r9, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:34:15 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0xc5) [ 476.695740][T31599] loop4: detected capacity change from 0 to 264192 14:34:15 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44001}, 0x898) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x141) ftruncate(r1, 0x0) [ 476.760767][T31614] loop2: detected capacity change from 0 to 264192 [ 476.798415][T31623] loop3: detected capacity change from 0 to 264192 [ 477.000029][ T22] kauditd_printk_skb: 2 callbacks suppressed [ 477.000041][ T22] audit: type=1326 audit(1631457255.599:95880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=31562 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x0 14:34:15 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc050210b, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 14:34:15 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x0) write$binfmt_misc(r0, &(0x7f0000000080)={'syz1', "889c4415b1b36a0ce1af3841f6f5b321c33475e8420572579340182176012fe5d52cff80e446a337d3ddc406e8ab77da892de7a37c96a4aaead9364e452523"}, 0x43) 14:34:15 executing program 2: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r5, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r8}, {}, {r7}, {r7}, {r7}, {}, {}, {0x0, r8}, {}, {0x0, r2}, {}, {}, {r6, r8}, {0x0, r8}, {}, {r7, r8}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {}, {0x0, r8}, {}, {}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {r7}, {}, {0x0, r8}, {r7, r8}, {0x0, r8}, {r6}, {}, {0x0, r8}, {r7}, {}, {}, {r7}, {0x0, r8}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {r6}, {}, {r7}, {r6}, {}, {r7}, {}, {}, {0x0, r8}, {}, {}, {r7}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {r7}, {}, {0x0, r8}, {r6}, {r7, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7, r8}, {r6, r8}, {r7}, {}, {r6}, {r6}, {}, {}, {r6}, {}, {}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {r6, r8}, {0x0, r8}, {}, {r6, r8}, {}, {}, {}, {r7}, {}, {}, {}, {r6}, {}, {r7}, {}, {}, {r7}, {0x0, r8}, {}, {}, {}, {}, {0x0, r8}, {}, {r6}, {}, {}, {}, {0x0, r8}, {r6, r8}, {r7}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {r6}, {r7}, {0x0, r8}, {}, {}, {r6}, {0x0, r8}, {r7}, {r6, r8}, {0x0, r8}, {}, {0x0, r8}, {}, {}, {0x0, r8}, {r7}, {}, {}, {r6}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {r6}, {r7}, {r7, r8}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {r7}, {0x0, r8}, {}, {r7}, {r7}, {0x0, r3}, {}, {}, {}, {}, {0x0, r8}, {r6}, {}, {}, {0x0, r8}, {}, {r7, r8}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {}, {}, {r6, r8}, {}, {}, {r7}, {r6}, {0x0, r8}, {}, {0x0, r8}, {r7}, {r7}, {r6}, {}, {0x0, r8}, {r7}], 0x1, "2156816c73038c"}) r9 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r9, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:34:15 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x8, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{0x0, r6}, {}, {r5}, {r5}, {r5}, {}, {}, {0x0, r6}, {}, {0x0, r1}, {}, {}, {r4, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {r5}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r4}, {}, {0x0, r6}, {r5}, {}, {}, {r5}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {r5, r6}, {}, {r2, r6}, {0x0, r6}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4}, {r5, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {r4, r6}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {}, {}, {r5}, {}, {}, {0x0, r6}, {r4}, {}, {r5}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {r5}, {}, {}, {}, {r4}, {r4}, {}, {r4}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {}, {}, {r4}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r4}, {r5}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {r5}, {r5}, {0x0, r3}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {r4}, {}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {r4, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {r5}, {r4}, {}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {}, {r4, r6}], 0x1, "2156816c73038c"}) r7 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 477.128088][ T22] audit: type=1326 audit(1631457255.719:95881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=31638 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x0 14:34:15 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) read$char_usb(r0, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x0) [ 477.213050][T31650] loop2: detected capacity change from 0 to 264192 [ 477.260407][T31662] loop4: detected capacity change from 0 to 264192 [ 477.262418][ C0] scsi_io_completion_action: 6 callbacks suppressed [ 477.262444][ C0] sd 0:0:1:0: tag#498 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 477.283517][ C0] sd 0:0:1:0: tag#498 CDB: opcode=0xe5 (vendor) [ 477.289809][ C0] sd 0:0:1:0: tag#498 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 477.298770][ C0] sd 0:0:1:0: tag#498 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 477.307811][ C0] sd 0:0:1:0: tag#498 CDB[20]: ba 14:34:16 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), 0x0, 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r2, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:34:16 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x9, 0x8, 0x40, 0x8, 0x0, 0x0, 0x2800, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x20, 0x1000}, 0x1120, 0x9, 0x6, 0x0, 0x3, 0x3, 0x3f, 0x0, 0xfffffff9, 0x0, 0x1a21}, 0x0, 0xffffffffffffffff, r0, 0x1) 14:34:16 executing program 1: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0200050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) 14:34:16 executing program 2: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r5, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r8}, {}, {r7}, {r7}, {r7}, {}, {}, {0x0, r8}, {}, {0x0, r2}, {}, {}, {r6, r8}, {0x0, r8}, {}, {r7, r8}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {}, {0x0, r8}, {}, {}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {r7}, {}, {0x0, r8}, {r7, r8}, {0x0, r8}, {r6}, {}, {0x0, r8}, {r7}, {}, {}, {r7}, {0x0, r8}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {r6}, {}, {r7}, {r6}, {}, {r7}, {}, {}, {0x0, r8}, {}, {}, {r7}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {r7}, {}, {0x0, r8}, {r6}, {r7, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7, r8}, {r6, r8}, {r7}, {}, {r6}, {r6}, {}, {}, {r6}, {}, {}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {r6, r8}, {0x0, r8}, {}, {r6, r8}, {}, {}, {}, {r7}, {}, {}, {}, {r6}, {}, {r7}, {}, {}, {r7}, {0x0, r8}, {}, {}, {}, {}, {0x0, r8}, {}, {r6}, {}, {}, {}, {0x0, r8}, {r6, r8}, {r7}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {r6}, {r7}, {0x0, r8}, {}, {}, {r6}, {0x0, r8}, {r7}, {r6, r8}, {0x0, r8}, {}, {0x0, r8}, {}, {}, {0x0, r8}, {r7}, {}, {}, {r6}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {r6}, {r7}, {r7, r8}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {r7}, {0x0, r8}, {}, {r7}, {r7}, {0x0, r3}, {}, {}, {}, {}, {0x0, r8}, {r6}, {}, {}, {0x0, r8}, {}, {r7, r8}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {}, {}, {r6, r8}, {}, {}, {r7}, {r6}, {0x0, r8}, {}, {0x0, r8}, {r7}, {r7}, {r6}, {}, {0x0, r8}, {r7}], 0x1, "2156816c73038c"}) r9 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r9, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:34:16 executing program 1: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0300050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) 14:34:16 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) read$char_usb(r1, 0x0, 0x0) setsockopt$inet_tcp_buf(r1, 0x6, 0x11, &(0x7f0000000180)="4090e008cab5484048d24b91389210a02968c3a7ed65c966da451d12f3b44bf665ecbbe4ffc98630cdcb488f652965d09c7746371b34653ba87b71a032bb1b680574341c7631210a023a7534651652b54437d3e033b07910841d35526aaba452b3377970e8abf01df7a1fdb9014428f0f6f84a542070164541fef387b7a6d93cea67419461187e0f5524d43d8588f0de8c5f141ef93dcc1320ee01e1effe03e64f00f348adc68386b8ce417bcb6a0479b777cf6989305b81c8cecf588069c8b7a5795e406fc6bb8208e1194cf1c64854576e0b91ce8387af216693992a1f6088b1bf", 0xe2) openat(r1, &(0x7f0000000000)='./file0\x00', 0x80040, 0x46) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000080)=@gcm_128={{0x303}, "c18c8a477479593d", "a4a45e4bf6e480e3bef86fee28a27ea6", "5c4ee93d", "11943bb4a0c6d269"}, 0x28) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) read$char_usb(r2, 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f0000000040)={0x0, 0xfff, 0xdc}) lseek(r2, 0x9, 0x3) [ 477.707371][T31685] loop3: detected capacity change from 0 to 264192 [ 477.711884][T31689] loop2: detected capacity change from 0 to 264192 14:34:16 executing program 1: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0500050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) [ 477.751252][ C0] sd 0:0:1:0: tag#499 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 477.761052][ C0] sd 0:0:1:0: tag#499 CDB: opcode=0xe5 (vendor) [ 477.767331][ C0] sd 0:0:1:0: tag#499 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 477.776293][ C0] sd 0:0:1:0: tag#499 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 477.785259][ C0] sd 0:0:1:0: tag#499 CDB[20]: ba [ 477.878392][ C0] sd 0:0:1:0: tag#500 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 477.888229][ C0] sd 0:0:1:0: tag#500 CDB: opcode=0xe5 (vendor) [ 477.894472][ C0] sd 0:0:1:0: tag#500 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 477.903538][ C0] sd 0:0:1:0: tag#500 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 477.912515][ C0] sd 0:0:1:0: tag#500 CDB[20]: ba [ 477.945243][ T22] audit: type=1326 audit(1631457256.549:95882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=31638 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x0 14:34:16 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc050210c, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 14:34:16 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) openat(r0, &(0x7f0000000080)='./bus\x00', 0x8000, 0xa) ftruncate(r0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x1, "2156816c73038c"}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000840)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r8}, {0x0, r8}, {r7}, {r7}, {r7, r8}, {}, {}, {0x0, r8}, {}, {}, {0x0, r8}, {}, {r6, r8}, {r3, r8}, {}, {r7, r8}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {r6}, {0x0, r8}, {0x0, r8}, {r7}, {0x0, r8}, {}, {}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {r7}, {}, {0x0, r8}, {r7, r8}, {0x0, r8}, {r6, r8}, {}, {0x0, r8}, {r7}, {}, {0x0, r8}, {r7}, {0x0, r8}, {r7}, {0x0, r8}, {0x0, r1}, {r6, r8}, {0x0, r8}, {r6}, {}, {r7}, {r6}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7, r8}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7}, {r6, r8}, {}, {}, {}, {}, {0x0, r8}, {}, {r7}, {r6}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {r6}, {0x0, r8}, {}, {0x0, r8}, {r6, r8}, {}, {}, {0x0, r8}, {}, {r6}, {0x0, r8}, {}, {r7}, {r6, r8}, {0x0, r8}, {r6}, {r7, r8}, {0x0, r8}, {r2, r8}, {0x0, r8}, {}, {0x0, r8}, {}, {r6, r8}, {}, {0x0, r8}, {r6, r8}, {0x0, r8}, {r7, r8}, {r6, r8}, {r7}, {}, {r6, r8}, {r6}, {r7}, {}, {r6}, {r6}, {}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7, r8}, {}, {}, {r6, r8}, {0x0, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {0x0, r8}, {}, {r7, r8}, {r7}, {}, {0x0, r8}, {r6}, {0x0, r8}, {r7, r8}, {r6}, {0x0, r8}, {r7, r8}, {0x0, r8}, {0x0, r8}, {}, {0x0, r8}, {r7}, {0x0, r8}, {r7}, {r6}, {}, {}, {}, {0x0, r8}, {r6, r8}, {r7}, {}, {0x0, r8}, {}, {r7}, {}, {}, {}, {r6}, {r6}, {0x0, r8}, {r6}, {r7, r8}, {}, {r6}, {}, {r6}, {0x0, r8}, {r7}, {r6, r8}, {0x0, r8}, {}, {0x0, r8}, {}, {}, {0x0, r8}, {r7}, {r6}, {}, {r6}, {r7}, {0x0, r8}, {r7, r8}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {}, {r7, r8}, {r6, r8}, {r7}, {r7, r8}, {}, {}, {}, {}, {}, {r7}, {}, {0x0, r8}, {}, {}, {}, {r7}, {0x0, r8}, {r6}, {r7}, {r7}, {}, {}, {r7}, {0x0, r8}, {}, {r6, r8}, {r6}, {}, {0x0, r8}, {0x0, r8}, {}, {r7, r8}, {r6}, {0x0, r8}, {r6}, {0x0, r8}, {r6, r8}, {r7, r8}, {}, {r6, r8}, {}, {}, {r7}, {r6, r8}, {0x0, r8}, {r6, r8}, {0x0, r8}, {r7}, {r7}, {r6}, {0x0, r8}, {0x0, r8}, {r7}, {0x0, r8}, {}, {}, {}, {r6, r8}], 0x1, "2156816c73038c"}) r9 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r9, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f0000000840)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r10, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r13}, {0x0, r13}, {r12}, {r12}, {r12, r13}, {}, {}, {0x0, r13}, {}, {}, {0x0, r13}, {}, {r11, r13}, {0x0, r13}, {}, {r12, r13}, {0x0, r13}, {}, {}, {}, {0x0, r13}, {r11}, {0x0, r13}, {0x0, r13}, {r12}, {0x0, r13}, {}, {}, {r11}, {0x0, r13}, {}, {}, {r11, r13}, {r12}, {}, {0x0, r13}, {r12, r13}, {0x0, r13}, {r11, r13}, {}, {0x0, r13}, {r12}, {}, {0x0, r13}, {r12}, {0x0, r13}, {r12}, {0x0, r13}, {}, {r11, r13}, {0x0, r13}, {r11}, {}, {r12}, {r11}, {}, {0x0, r13}, {}, {0x0, r13}, {0x0, r13}, {0x0, r13}, {0x0, r13}, {r12, r13}, {0x0, r13}, {0x0, r13}, {0x0, r13}, {r12}, {r11, r13}, {}, {}, {}, {}, {0x0, r13}, {}, {r12}, {r11}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {0x0, r13}, {r11}, {0x0, r13}, {}, {0x0, r13}, {r11, r13}, {}, {}, {0x0, r13}, {}, {r11}, {0x0, r13}, {}, {r12}, {r11, r13}, {0x0, r13}, {r11}, {r12, r13}, {0x0, r13}, {0x0, r13}, {0x0, r13}, {}, {0x0, r13}, {}, {r11, r13}, {}, {0x0, r13}, {r11, r13}, {0x0, r13}, {r12, r13}, {r11, r13}, {r12}, {}, {r11, r13}, {r11}, {r12}, {}, {r11}, {r11}, {}, {}, {0x0, r13}, {0x0, r13}, {0x0, r13}, {r12, r13}, {}, {}, {r11, r13}, {0x0, r13}, {r12, r13}, {r11, r13}, {r12, r13}, {0x0, r13}, {}, {r12, r13}, {r12}, {}, {0x0, r13}, {r11}, {0x0, r13}, {r12, r13}, {r11}, {0x0, r13}, {r12, r13}, {0x0, r13}, {0x0, r13}, {}, {0x0, r13}, {r12}, {0x0, r13}, {r12}, {r11}, {}, {}, {}, {0x0, r13}, {r11, r13}, {r12}, {}, {0x0, r13}, {}, {r12}, {}, {}, {}, {r11}, {r11}, {0x0, r13}, {r11}, {r12, r13}, {}, {r11}, {}, {r11}, {0x0, r13}, {r12}, {r11, r13}, {0x0, r13}, {}, {0x0, r13}, {}, {}, {0x0, r13}, {r12}, {r11}, {}, {r11}, {r12}, {0x0, r13}, {r12, r13}, {0x0, r13}, {0x0, r13}, {0x0, r13}, {}, {r12, r13}, {r11, r13}, {r12}, {r12, r13}, {}, {}, {}, {}, {}, {r12}, {}, {0x0, r13}, {}, {}, {}, {r12}, {0x0, r13}, {r11}, {r12}, {r12}, {}, {}, {r12}, {0x0, r13}, {}, {r11, r13}, {r11}, {}, {0x0, r13}, {0x0, r13}, {}, {r12, r13}, {r11}, {0x0, r13}, {r11}, {0x0, r13}, {r11, r13}, {r12, r13}, {}, {r11, r13}, {}, {}, {r12}, {r11, r13}, {0x0, r13}, {r11, r13}, {0x0, r13}, {r12}, {r12}, {r11}, {0x0, r13}, {0x0, r13}, {r12}, {0x0, r13}, {}, {}, {}, {r11, r13}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000481c0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {r11}], 0x3, "99b308ab934081"}) r14 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f00000000c0)=0x9) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r14, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r17}, {0x0, r17}, {r16}, {r16}, {r16, r17}, {}, {}, {0x0, r17}, {}, {}, {0x0, r17}, {}, {r15, r17}, {0x0, r17}, {}, {r16, r17}, {0x0, r17}, {}, {}, {}, {0x0, r17}, {r15}, {0x0, r17}, {0x0, r17}, {r16}, {0x0, r17}, {}, {}, {r15}, {0x0, r17}, {}, {}, {r15, r17}, {r16}, {}, {0x0, r17}, {r16, r17}, {0x0, r17}, {r15, r17}, {}, {0x0, r17}, {r16}, {}, {0x0, r17}, {r16}, {0x0, r17}, {r16}, {0x0, r17}, {}, {r15, r17}, {0x0, r17}, {r15}, {}, {r16}, {r15}, {}, {0x0, r17}, {}, {0x0, r17}, {0x0, r17}, {0x0, r17}, {0x0, r17}, {r16, r17}, {0x0, r17}, {0x0, r17}, {0x0, r17}, {r16}, {r15, r17}, {}, {}, {}, {}, {0x0, r17}, {}, {r16}, {r15}, {}, {}, {}, {0x0, r17}, {}, {}, {}, {0x0, r17}, {r15}, {0x0, r17}, {}, {0x0, r17}, {r15, r17}, {}, {}, {0x0, r17}, {}, {r15}, {0x0, r17}, {}, {r16}, {r15, r17}, {0x0, r17}, {r15}, {r16, r17}, {0x0, r17}, {0x0, r17}, {0x0, r17}, {}, {0x0, r17}, {}, {r15, r17}, {}, {0x0, r17}, {r15, r17}, {0x0, r17}, {r16, r17}, {r15, r17}, {r16}, {}, {r15, r17}, {r15}, {r16}, {}, {r15}, {r15}, {}, {}, {0x0, r17}, {0x0, r17}, {0x0, r17}, {0x0, r17}, {}, {}, {}, {0x0, r17}, {r16, r17}, {r15, r17}, {r16, r17}, {0x0, r17}, {}, {0x0, r17}, {}, {}, {0x0, r17}, {r15}, {0x0, r17}, {0x0, r17}, {}, {}, {r16, r17}, {0x0, r17}, {0x0, r17}, {}, {0x0, r17}, {r16}, {}, {}, {r15}, {}, {}, {}, {0x0, r17}, {r15, r17}, {r16}, {}, {0x0, r17}, {}, {r16}, {}, {}, {}, {r15}, {r15}, {0x0, r17}, {r15}, {r16}, {}, {r15}, {}, {r15}, {0x0, r17}, {r16}, {r15, r17}, {0x0, r17}, {}, {0x0, r17}, {}, {}, {}, {r16}, {r15}, {}, {r15}, {r16}, {0x0, r17}, {r16, r17}, {0x0, r17}, {0x0, r17}, {0x0, r17}, {}, {}, {r15, r17}, {r16}, {r16, r17}, {}, {}, {}, {}, {}, {r16}, {}, {0x0, r17}, {}, {}, {}, {r16}, {0x0, r17}, {}, {}, {r16}, {}, {}, {r16}, {0x0, r17}, {}, {r15, r17}, {r15}, {}, {0x0, r17}, {0x0, r17}, {}, {0x0, r17}, {}, {0x0, r17}, {r15}, {0x0, r17}, {r15, r17}, {r16, r17}, {}, {r15, r17}, {}, {}, {}, {r15}, {0x0, r17}, {r15, r17}, {0x0, r17}, {r16}, {r16}, {r15}, {0x0, r17}, {0x0, r17}, {r16}, {0x0, r17}, {}, {}, {}, {r15}], 0x1, "2156816c73038c"}) 14:34:16 executing program 1: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0f00050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) [ 478.076601][ T22] audit: type=1326 audit(1631457256.679:95883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=31716 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x0 [ 478.108060][ C0] sd 0:0:1:0: tag#501 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 478.117827][ C0] sd 0:0:1:0: tag#501 CDB: opcode=0xe5 (vendor) [ 478.124103][ C0] sd 0:0:1:0: tag#501 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 478.133159][ C0] sd 0:0:1:0: tag#501 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 478.142141][ C0] sd 0:0:1:0: tag#501 CDB[20]: ba [ 478.165798][ C1] sd 0:0:1:0: tag#502 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s 14:34:16 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x8, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{0x0, r6}, {}, {r5}, {r5}, {r5}, {}, {}, {0x0, r6}, {}, {0x0, r1}, {}, {}, {r4, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {r5}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r4}, {}, {0x0, r6}, {r5}, {}, {}, {r5}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {r5, r6}, {}, {r2, r6}, {0x0, r6}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {0x0, r6}, {r4}, {r5, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {r4, r6}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {}, {}, {r5}, {}, {}, {0x0, r6}, {r4}, {}, {r5}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {r5}, {}, {}, {}, {r4}, {r4}, {}, {r4}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {}, {}, {r4}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r4}, {r5}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {r5}, {r5}, {0x0, r3}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {r4}, {}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {r4, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {r5}, {r4}, {}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {}, {r4, r6}], 0x1, "2156816c73038c"}) r7 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:34:16 executing program 1: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="1000050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) [ 478.176758][ C1] sd 0:0:1:0: tag#502 CDB: opcode=0xe5 (vendor) [ 478.183002][ C1] sd 0:0:1:0: tag#502 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 478.191995][ C1] sd 0:0:1:0: tag#502 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 478.201063][ C1] sd 0:0:1:0: tag#502 CDB[20]: ba [ 478.248313][ C0] sd 0:0:1:0: tag#503 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 478.258181][ C0] sd 0:0:1:0: tag#503 CDB: opcode=0xe5 (vendor) [ 478.264428][ C0] sd 0:0:1:0: tag#503 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 478.273403][ C0] sd 0:0:1:0: tag#503 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 478.282372][ C0] sd 0:0:1:0: tag#503 CDB[20]: ba [ 478.318426][T31735] loop4: detected capacity change from 0 to 264192 [ 478.355134][ C0] sd 0:0:1:0: tag#504 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 478.364926][ C0] sd 0:0:1:0: tag#504 CDB: opcode=0xe5 (vendor) [ 478.371179][ C0] sd 0:0:1:0: tag#504 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 478.380152][ C0] sd 0:0:1:0: tag#504 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 478.389114][ C0] sd 0:0:1:0: tag#504 CDB[20]: ba 14:34:17 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), 0x0, 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r2, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:34:17 executing program 1: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400030900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) 14:34:17 executing program 5: ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x0) 14:34:17 executing program 2: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r5, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r8}, {}, {r7}, {r7}, {r7}, {}, {}, {0x0, r8}, {}, {0x0, r2}, {}, {}, {r6, r8}, {0x0, r8}, {}, {r7, r8}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {}, {0x0, r8}, {}, {}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {r7}, {}, {0x0, r8}, {r7, r8}, {0x0, r8}, {r6}, {}, {0x0, r8}, {r7}, {}, {}, {r7}, {0x0, r8}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {r6}, {}, {r7}, {}, {}, {r7, r8}, {}, {}, {0x0, r8}, {}, {}, {r7}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {r7}, {}, {0x0, r8}, {r6}, {r7, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7, r8}, {r6, r8}, {r7}, {}, {r6}, {r6}, {}, {}, {r6}, {}, {}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {r6, r8}, {0x0, r8}, {}, {r6, r8}, {}, {}, {}, {r7}, {}, {}, {}, {r6}, {}, {r7}, {}, {}, {r7}, {0x0, r8}, {}, {}, {}, {}, {0x0, r8}, {}, {r6}, {}, {}, {}, {0x0, r8}, {r6, r8}, {r7}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {r6}, {r7}, {0x0, r8}, {}, {}, {r6}, {0x0, r8}, {r7}, {r6, r8}, {0x0, r8}, {}, {0x0, r8}, {}, {}, {0x0, r8}, {r7}, {}, {}, {r6}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {r6}, {r7}, {r7, r8}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {r7}, {0x0, r8}, {}, {r7}, {r7}, {0x0, r3}, {}, {}, {}, {}, {0x0, r8}, {r6}, {}, {}, {0x0, r8}, {}, {r7, r8}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {}, {}, {r6, r8}, {}, {}, {r7}, {r6}, {0x0, r8}, {}, {0x0, r8}, {r7}, {r7}, {r6}, {}, {0x0, r8}, {r7}], 0x1, "2156816c73038c"}) r9 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r9, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:34:17 executing program 1: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0402050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) [ 478.598593][T31750] loop3: detected capacity change from 0 to 264192 [ 478.635071][ C0] sd 0:0:1:0: tag#505 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s 14:34:17 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x5, 0x100000000000000, 0x1, 0x0, 0x0, 0x3ff}, 0x0, 0xa, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x810, r0, 0xe4955000) ftruncate(r0, 0x0) 14:34:17 executing program 1: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0403050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) [ 478.644882][ C0] sd 0:0:1:0: tag#505 CDB: opcode=0xe5 (vendor) [ 478.651150][ C0] sd 0:0:1:0: tag#505 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 478.660297][ C0] sd 0:0:1:0: tag#505 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 478.669386][ C0] sd 0:0:1:0: tag#505 CDB[20]: ba [ 478.685904][T31761] loop2: detected capacity change from 0 to 264192 [ 478.781856][ C0] sd 0:0:1:0: tag#506 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 478.791766][ C0] sd 0:0:1:0: tag#506 CDB: opcode=0xe5 (vendor) [ 478.798079][ C0] sd 0:0:1:0: tag#506 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 478.807277][ C0] sd 0:0:1:0: tag#506 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 478.816255][ C0] sd 0:0:1:0: tag#506 CDB[20]: ba [ 478.906417][ T22] audit: type=1326 audit(1631457257.509:95884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=31716 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x0 14:34:17 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc050210d, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 14:34:17 executing program 1: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0404050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) 14:34:17 executing program 5: bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x84, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xdeb}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x0) [ 479.028208][ T22] audit: type=1326 audit(1631457257.629:95885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=31784 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x0 14:34:17 executing program 2: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r5, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r8}, {}, {r7}, {r7}, {r7}, {}, {}, {0x0, r8}, {}, {0x0, r2}, {}, {}, {r6, r8}, {0x0, r8}, {}, {r7, r8}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {}, {0x0, r8}, {}, {}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {r7}, {}, {0x0, r8}, {r7, r8}, {0x0, r8}, {r6}, {}, {0x0, r8}, {r7}, {}, {}, {r7}, {0x0, r8}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {r6}, {}, {r7}, {}, {}, {r7, r8}, {}, {}, {0x0, r8}, {}, {}, {r7}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {r7}, {}, {0x0, r8}, {r6}, {r7, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7, r8}, {r6, r8}, {r7}, {}, {r6}, {r6}, {}, {}, {r6}, {}, {}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {r6, r8}, {0x0, r8}, {}, {r6, r8}, {}, {}, {}, {r7}, {}, {}, {}, {r6}, {}, {r7}, {}, {}, {r7}, {0x0, r8}, {}, {}, {}, {}, {0x0, r8}, {}, {r6}, {}, {}, {}, {0x0, r8}, {r6, r8}, {r7}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {r6}, {r7}, {0x0, r8}, {}, {}, {r6}, {0x0, r8}, {r7}, {r6, r8}, {0x0, r8}, {}, {0x0, r8}, {}, {}, {0x0, r8}, {r7}, {}, {}, {r6}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {r6}, {r7}, {r7, r8}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {r7}, {0x0, r8}, {}, {r7}, {r7}, {0x0, r3}, {}, {}, {}, {}, {0x0, r8}, {r6}, {}, {}, {0x0, r8}, {}, {r7, r8}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {}, {}, {r6, r8}, {}, {}, {r7}, {r6}, {0x0, r8}, {}, {0x0, r8}, {r7}, {r7}, {r6}, {}, {0x0, r8}, {r7}], 0x1, "2156816c73038c"}) r9 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r9, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:34:17 executing program 1: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0405050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) [ 479.167985][T31802] loop2: detected capacity change from 0 to 264192 [ 479.195702][ C0] sd 0:0:1:0: tag#507 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 479.205477][ C0] sd 0:0:1:0: tag#507 CDB: opcode=0xe5 (vendor) [ 479.211731][ C0] sd 0:0:1:0: tag#507 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 479.220755][ C0] sd 0:0:1:0: tag#507 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 479.229804][ C0] sd 0:0:1:0: tag#507 CDB[20]: ba 14:34:18 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r2, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:34:18 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x8, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{0x0, r6}, {}, {r5}, {r5}, {r5}, {}, {}, {0x0, r6}, {}, {0x0, r1}, {}, {}, {r4, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {r5}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r4}, {}, {0x0, r6}, {r5}, {}, {}, {r5}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {r5, r6}, {}, {r2, r6}, {0x0, r6}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {0x0, r6}, {r4}, {r5, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {r4, r6}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {}, {}, {r5}, {}, {}, {0x0, r6}, {r4}, {}, {r5}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {r5}, {}, {}, {}, {r4}, {r4}, {}, {r4}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {}, {}, {r4}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r4}, {r5}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {r5}, {r5}, {0x0, r3}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {r4}, {}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {r4, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {r5}, {r4}, {}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {}, {r4, r6}], 0x1, "2156816c73038c"}) r7 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:34:18 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0xa910, 0x0, 0x147, 0x2, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/node', 0x200, 0x122) ftruncate(0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/bsg', 0x200200, 0x200) 14:34:18 executing program 1: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0406050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) 14:34:18 executing program 2: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r5, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r8}, {}, {r7}, {r7}, {r7}, {}, {}, {0x0, r8}, {}, {0x0, r2}, {}, {}, {r6, r8}, {0x0, r8}, {}, {r7, r8}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {}, {0x0, r8}, {}, {}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {r7}, {}, {0x0, r8}, {r7, r8}, {0x0, r8}, {r6}, {}, {0x0, r8}, {r7}, {}, {}, {r7}, {0x0, r8}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {r6}, {}, {r7}, {}, {}, {r7, r8}, {}, {}, {0x0, r8}, {}, {}, {r7}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {r7}, {}, {0x0, r8}, {r6}, {r7, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7, r8}, {r6, r8}, {r7}, {}, {r6}, {r6}, {}, {}, {r6}, {}, {}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {r6, r8}, {0x0, r8}, {}, {r6, r8}, {}, {}, {}, {r7}, {}, {}, {}, {r6}, {}, {r7}, {}, {}, {r7}, {0x0, r8}, {}, {}, {}, {}, {0x0, r8}, {}, {r6}, {}, {}, {}, {0x0, r8}, {r6, r8}, {r7}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {r6}, {r7}, {0x0, r8}, {}, {}, {r6}, {0x0, r8}, {r7}, {r6, r8}, {0x0, r8}, {}, {0x0, r8}, {}, {}, {0x0, r8}, {r7}, {}, {}, {r6}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {r6}, {r7}, {r7, r8}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {r7}, {0x0, r8}, {}, {r7}, {r7}, {0x0, r3}, {}, {}, {}, {}, {0x0, r8}, {r6}, {}, {}, {0x0, r8}, {}, {r7, r8}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {}, {}, {r6, r8}, {}, {}, {r7}, {r6}, {0x0, r8}, {}, {0x0, r8}, {r7}, {r7}, {r6}, {}, {0x0, r8}, {r7}], 0x1, "2156816c73038c"}) r9 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r9, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:34:18 executing program 1: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0407050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) [ 479.446231][T31813] loop4: detected capacity change from 0 to 264192 14:34:18 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) read$char_usb(r0, 0x0, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3a) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r1, 0x9, 0x5) r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x9, 0x7, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x1}, 0x10004, 0x0, 0x6, 0x9, 0x0, 0x400, 0x20}, r1, 0x0, r0, 0x0) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r4 = dup2(r2, r0) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000480)={0x0, 0x1ca, 0x1, [0x0, 0x9, 0x7, 0x62c, 0x7], [0x7fff, 0x5, 0x6, 0x5, 0x4, 0x6, 0xffffffffffffd686, 0xff80000000000000, 0x9, 0x3, 0x4, 0x4, 0x6, 0x7fff, 0x800, 0x8, 0x7ff, 0x20, 0x3, 0x1f, 0x7ff, 0x80, 0x820, 0xfffffffffffffffb, 0x6, 0x7772, 0x0, 0x2, 0x9, 0x3ff, 0xfdb, 0x1, 0x7, 0x80, 0x7, 0x8, 0x0, 0x2, 0xffffffffffff998d, 0x40, 0xf4, 0x1, 0x7fffffff, 0x0, 0x7, 0x7, 0x0, 0x5, 0xf2, 0x7ff, 0x400, 0x0, 0x2, 0x7, 0x100000001, 0x6, 0x100000001, 0xffffffff, 0x8000, 0x2000000, 0x3, 0x3, 0x165, 0x8, 0x101, 0x5, 0x3, 0x7, 0x400, 0x6, 0x8, 0x0, 0x4, 0x51c, 0xa5, 0x20, 0x10000, 0xe5ef, 0x8, 0x1, 0x4, 0x0, 0xffffffffffffff80, 0x6, 0x800, 0x0, 0xfffffffffffffffd, 0x36, 0x40, 0x7, 0x0, 0x2, 0x1f, 0x6, 0xa5, 0x3, 0x1ff, 0x9, 0x7, 0x4, 0xd77, 0x1000, 0x3, 0xff, 0x2, 0xffff, 0xa, 0x4f, 0x2, 0x100, 0x9, 0xffffffff, 0x6, 0x3, 0x2, 0x40, 0x6, 0x0, 0x3, 0xff, 0x10001]}) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f00000008c0)={r5, 0x3, 0x1ff, 0x1}) ftruncate(r3, 0x0) [ 479.519913][T31832] FAT-fs (loop3): bogus number of reserved sectors [ 479.526483][T31832] FAT-fs (loop3): Can't find a valid FAT filesystem [ 479.542706][T31833] loop2: detected capacity change from 0 to 264192 [ 479.854262][ T22] audit: type=1326 audit(1631457258.449:95886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=31784 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x0 14:34:18 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc050210e, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 14:34:18 executing program 1: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0408050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) 14:34:18 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x1, 0x81, 0x73, 0x9, 0x0, 0xb84, 0x0, 0x4, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x800, 0x4, @perf_bp={&(0x7f0000000080)}, 0x4588, 0x3, 0x9e, 0x2, 0x2, 0x81f9, 0x7, 0x0, 0x6, 0x0, 0x3ff}, 0xffffffffffffffff, 0x3, r0, 0x9) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x0) 14:34:18 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x8, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{0x0, r6}, {}, {r5}, {r5}, {r5}, {}, {}, {0x0, r6}, {}, {0x0, r1}, {}, {}, {r4, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {r5}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r4}, {}, {0x0, r6}, {r5}, {}, {}, {r5}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {r5, r6}, {}, {r2, r6}, {0x0, r6}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {0x0, r6}, {r4}, {r5, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {r4, r6}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {}, {}, {r5}, {}, {}, {0x0, r6}, {r4}, {}, {r5}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {r5}, {}, {}, {}, {r4}, {r4}, {}, {r4}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {}, {}, {r4}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r4}, {r5}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {r5}, {r5}, {0x0, r3}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {r4}, {}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {r4, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {r5}, {r4}, {}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {}, {r4, r6}], 0x1, "2156816c73038c"}) r7 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:34:18 executing program 2: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r5, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r8}, {}, {r7}, {r7}, {r7}, {}, {}, {0x0, r8}, {}, {0x0, r2}, {}, {}, {r6, r8}, {0x0, r8}, {}, {r7, r8}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {}, {0x0, r8}, {}, {}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {r7}, {}, {0x0, r8}, {r7, r8}, {0x0, r8}, {r6}, {}, {0x0, r8}, {r7}, {}, {}, {r7}, {0x0, r8}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {r6}, {}, {}, {r6}, {}, {r7, r8}, {}, {}, {0x0, r8}, {}, {}, {r7}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {r7}, {}, {0x0, r8}, {r6}, {r7, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7, r8}, {r6, r8}, {r7}, {}, {r6}, {r6}, {}, {}, {r6}, {}, {}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {r6, r8}, {0x0, r8}, {}, {r6, r8}, {}, {}, {}, {r7}, {}, {}, {}, {r6}, {}, {r7}, {}, {}, {r7}, {0x0, r8}, {}, {}, {}, {}, {0x0, r8}, {}, {r6}, {}, {}, {}, {0x0, r8}, {r6, r8}, {r7}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {r6}, {r7}, {0x0, r8}, {}, {}, {r6}, {0x0, r8}, {r7}, {r6, r8}, {0x0, r8}, {}, {0x0, r8}, {}, {}, {0x0, r8}, {r7}, {}, {}, {r6}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {r6}, {r7}, {r7, r8}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {r7}, {0x0, r8}, {}, {r7}, {r7}, {0x0, r3}, {}, {}, {}, {}, {0x0, r8}, {r6}, {}, {}, {0x0, r8}, {}, {r7, r8}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {}, {}, {r6, r8}, {}, {}, {r7}, {r6}, {0x0, r8}, {}, {0x0, r8}, {r7}, {r7}, {r6}, {}, {0x0, r8}, {r7}], 0x1, "2156816c73038c"}) r9 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r9, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 479.935279][T31870] loop4: detected capacity change from 0 to 264192 [ 479.950906][ T22] audit: type=1326 audit(1631457258.549:95887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=31864 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x0 [ 479.951577][T31875] loop2: detected capacity change from 0 to 264192 14:34:18 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r2, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:34:18 executing program 1: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040a050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) 14:34:18 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x140) ftruncate(r0, 0x0) 14:34:18 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x8, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{0x0, r6}, {}, {r5}, {r5}, {r5}, {}, {}, {0x0, r6}, {}, {0x0, r1}, {}, {}, {r4, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {r5}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r4}, {}, {0x0, r6}, {r5}, {}, {}, {r5}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {r5, r6}, {}, {r2, r6}, {0x0, r6}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {r5}, {}, {0x0, r6}, {r4}, {r5, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {r4, r6}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {}, {}, {r5}, {}, {}, {0x0, r6}, {r4}, {}, {r5}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {r5}, {}, {}, {}, {r4}, {r4}, {}, {r4}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {}, {}, {r4}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r4}, {r5}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {r5}, {r5}, {0x0, r3}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {r4}, {}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {r4, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {r5}, {r4}, {}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {}, {r4, r6}], 0x1, "2156816c73038c"}) r7 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:34:18 executing program 2: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r5, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r8}, {}, {r7}, {r7}, {r7}, {}, {}, {0x0, r8}, {}, {0x0, r2}, {}, {}, {r6, r8}, {0x0, r8}, {}, {r7, r8}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {}, {0x0, r8}, {}, {}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {r7}, {}, {0x0, r8}, {r7, r8}, {0x0, r8}, {r6}, {}, {0x0, r8}, {r7}, {}, {}, {r7}, {0x0, r8}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {r6}, {}, {}, {r6}, {}, {r7, r8}, {}, {}, {0x0, r8}, {}, {}, {r7}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {r7}, {}, {0x0, r8}, {r6}, {r7, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7, r8}, {r6, r8}, {r7}, {}, {r6}, {r6}, {}, {}, {r6}, {}, {}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {r6, r8}, {0x0, r8}, {}, {r6, r8}, {}, {}, {}, {r7}, {}, {}, {}, {r6}, {}, {r7}, {}, {}, {r7}, {0x0, r8}, {}, {}, {}, {}, {0x0, r8}, {}, {r6}, {}, {}, {}, {0x0, r8}, {r6, r8}, {r7}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {r6}, {r7}, {0x0, r8}, {}, {}, {r6}, {0x0, r8}, {r7}, {r6, r8}, {0x0, r8}, {}, {0x0, r8}, {}, {}, {0x0, r8}, {r7}, {}, {}, {r6}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {r6}, {r7}, {r7, r8}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {r7}, {0x0, r8}, {}, {r7}, {r7}, {0x0, r3}, {}, {}, {}, {}, {0x0, r8}, {r6}, {}, {}, {0x0, r8}, {}, {r7, r8}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {}, {}, {r6, r8}, {}, {}, {r7}, {r6}, {0x0, r8}, {}, {0x0, r8}, {r7}, {r7}, {r6}, {}, {0x0, r8}, {r7}], 0x1, "2156816c73038c"}) r9 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r9, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 480.390152][T31900] loop2: detected capacity change from 0 to 264192 [ 480.393942][T31902] loop4: detected capacity change from 0 to 264192 14:34:19 executing program 1: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040b050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) [ 480.455902][T31915] FAT-fs (loop3): bogus number of reserved sectors [ 480.462459][T31915] FAT-fs (loop3): Can't find a valid FAT filesystem 14:34:19 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x5, 0x6}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000180)={r2, 0x3, 0x6, @dev}, 0x10) r3 = socket(0x11, 0x800000003, 0x0) r4 = socket(0x27, 0x2, 0xfffffffc) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0x14) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r5, 0x5, 0x6}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000180)={r5, 0x3, 0x6, @dev}, 0x10) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8604c008}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010028bd7000fddbdf250900f34c42879d43228d03000200000808000100ffcc1b443f0a14ab98ee0ab698372062df575507b87bf8857167131b3f94db9be568e66ff3bd56fd73adf0d4201e1abf434dfdbf0a48e9538193782e9cac74eec4de70b97b5a94e3a159f233f5a9ffb3eeb490ed8d178c62a9d1359dc659ffcabcddaeafbaa4fdd287ce6c00000000000000", @ANYRES32=r2, @ANYBLOB="0800eb52a1980967371dd2f81ef0387535f27000e6030000000000080003d7e9ca08f0fd6f5f0dfce80a533bbda006534f300bc6b09efea24cdb9cde1f848b0319a9567ad2265f29911d307cc69e2e2f67453ad69eafa8d76cd872e8e9f647631928ca91dc48353feb1347a7029c24888c1991670a42ba849a18cec3aca7105956bebf1474ee5706bac3cc54692e760f7c35eff6ad365f5c74a96c76f5a8cddb0fb2b2613be0bfc80d99bd4d0b8ffcb47888fbf55bbbe99d8accc37d027c2fd2c336f5bace2c28668cacb081084e05b29ca705e08c406aece40723cebfa12e3afa4d6e2bd997", @ANYRES32=r5, @ANYBLOB="08000300010000001400020073797a6b616c6c657231000800"/35], 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x880) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x400}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x5, 0x6, @random="bd7b2976ddfe"}, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000180)={r6, 0x3, 0x6, @dev}, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000240)={r6, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, 0x10) r7 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r7, 0x0) [ 480.577133][T31931] device lo entered promiscuous mode [ 480.610546][T31926] device lo left promiscuous mode [ 480.636717][T31931] device lo entered promiscuous mode [ 480.649588][T31926] device lo left promiscuous mode [ 480.774777][ T22] audit: type=1326 audit(1631457259.379:95888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=31864 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x0 14:34:19 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502110, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 14:34:19 executing program 1: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0418050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) 14:34:19 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x0) open(&(0x7f00000000c0)='./bus/file0\x00', 0x8a880, 0x8) openat$incfs(r0, &(0x7f0000000080)='.log\x00', 0x105500, 0x99) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000380)) 14:34:19 executing program 2: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r5, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r8}, {}, {r7}, {r7}, {r7}, {}, {}, {0x0, r8}, {}, {0x0, r2}, {}, {}, {r6, r8}, {0x0, r8}, {}, {r7, r8}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {}, {0x0, r8}, {}, {}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {r7}, {}, {0x0, r8}, {r7, r8}, {0x0, r8}, {r6}, {}, {0x0, r8}, {r7}, {}, {}, {r7}, {0x0, r8}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {r6}, {}, {}, {r6}, {}, {r7, r8}, {}, {}, {0x0, r8}, {}, {}, {r7}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {r7}, {}, {0x0, r8}, {r6}, {r7, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7, r8}, {r6, r8}, {r7}, {}, {r6}, {r6}, {}, {}, {r6}, {}, {}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {r6, r8}, {0x0, r8}, {}, {r6, r8}, {}, {}, {}, {r7}, {}, {}, {}, {r6}, {}, {r7}, {}, {}, {r7}, {0x0, r8}, {}, {}, {}, {}, {0x0, r8}, {}, {r6}, {}, {}, {}, {0x0, r8}, {r6, r8}, {r7}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {r6}, {r7}, {0x0, r8}, {}, {}, {r6}, {0x0, r8}, {r7}, {r6, r8}, {0x0, r8}, {}, {0x0, r8}, {}, {}, {0x0, r8}, {r7}, {}, {}, {r6}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {r6}, {r7}, {r7, r8}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {r7}, {0x0, r8}, {}, {r7}, {r7}, {0x0, r3}, {}, {}, {}, {}, {0x0, r8}, {r6}, {}, {}, {0x0, r8}, {}, {r7, r8}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {}, {}, {r6, r8}, {}, {}, {r7}, {r6}, {0x0, r8}, {}, {0x0, r8}, {r7}, {r7}, {r6}, {}, {0x0, r8}, {r7}], 0x1, "2156816c73038c"}) r9 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r9, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:34:19 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x8, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{0x0, r6}, {}, {r5}, {r5}, {r5}, {}, {}, {0x0, r6}, {}, {0x0, r1}, {}, {}, {r4, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {r5}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r4}, {}, {0x0, r6}, {r5}, {}, {}, {r5}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {r5, r6}, {}, {r2, r6}, {0x0, r6}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {r5}, {}, {0x0, r6}, {r4}, {r5, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {r4, r6}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {}, {}, {r5}, {}, {}, {0x0, r6}, {r4}, {}, {r5}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {r5}, {}, {}, {}, {r4}, {r4}, {}, {r4}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {}, {}, {r4}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r4}, {r5}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {r5}, {r5}, {0x0, r3}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {r4}, {}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {r4, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {r5}, {r4}, {}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {}, {r4, r6}], 0x1, "2156816c73038c"}) r7 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 480.894881][ T22] audit: type=1326 audit(1631457259.499:95889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=31948 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x0 [ 480.929590][T31956] loop2: detected capacity change from 0 to 264192 [ 480.932774][T31957] loop4: detected capacity change from 0 to 264192 14:34:19 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x0) 14:34:19 executing program 1: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="041c050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) 14:34:19 executing program 2: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r5, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r8}, {}, {r7}, {r7}, {r7}, {}, {}, {0x0, r8}, {}, {0x0, r2}, {}, {}, {r6, r8}, {0x0, r8}, {}, {r7, r8}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {}, {0x0, r8}, {}, {}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {r7}, {}, {0x0, r8}, {r7, r8}, {0x0, r8}, {r6}, {}, {0x0, r8}, {r7}, {}, {}, {r7}, {0x0, r8}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {}, {}, {r7}, {r6}, {}, {r7, r8}, {}, {}, {0x0, r8}, {}, {}, {r7}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {r7}, {}, {0x0, r8}, {r6}, {r7, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7, r8}, {r6, r8}, {r7}, {}, {r6}, {r6}, {}, {}, {r6}, {}, {}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {r6, r8}, {0x0, r8}, {}, {r6, r8}, {}, {}, {}, {r7}, {}, {}, {}, {r6}, {}, {r7}, {}, {}, {r7}, {0x0, r8}, {}, {}, {}, {}, {0x0, r8}, {}, {r6}, {}, {}, {}, {0x0, r8}, {r6, r8}, {r7}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {r6}, {r7}, {0x0, r8}, {}, {}, {r6}, {0x0, r8}, {r7}, {r6, r8}, {0x0, r8}, {}, {0x0, r8}, {}, {}, {0x0, r8}, {r7}, {}, {}, {r6}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {r6}, {r7}, {r7, r8}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {r7}, {0x0, r8}, {}, {r7}, {r7}, {0x0, r3}, {}, {}, {}, {}, {0x0, r8}, {r6}, {}, {}, {0x0, r8}, {}, {r7, r8}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {}, {}, {r6, r8}, {}, {}, {r7}, {r6}, {0x0, r8}, {}, {0x0, r8}, {r7}, {r7}, {r6}, {}, {0x0, r8}, {r7}], 0x1, "2156816c73038c"}) r9 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r9, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:34:19 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r2, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:34:19 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x8, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{0x0, r6}, {}, {r5}, {r5}, {r5}, {}, {}, {0x0, r6}, {}, {0x0, r1}, {}, {}, {r4, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {r5}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r4}, {}, {0x0, r6}, {r5}, {}, {}, {r5}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {r5, r6}, {}, {r2, r6}, {0x0, r6}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {r5}, {}, {0x0, r6}, {r4}, {r5, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {r4, r6}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {}, {}, {r5}, {}, {}, {0x0, r6}, {r4}, {}, {r5}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {r5}, {}, {}, {}, {r4}, {r4}, {}, {r4}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {}, {}, {r4}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r4}, {r5}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {r5}, {r5}, {0x0, r3}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {r4}, {}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {r4, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {r5}, {r4}, {}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {}, {r4, r6}], 0x1, "2156816c73038c"}) r7 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 481.326441][T31984] loop2: detected capacity change from 0 to 264192 [ 481.340541][T31990] loop4: detected capacity change from 0 to 264192 14:34:20 executing program 1: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0426050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) 14:34:20 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r1 = fsmount(r0, 0x1, 0x72) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x12, r1, 0x4000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="2321202e2f62757320165e5e2def2f2fb9402c18210a8a82deec9c9a786a70c1e443a05ea63ade05c389a9bcfbf3376f9fd3a9b0f0db24d748f81ae2b14223f53347b8d59264b928934de0180d9da0948058f028124c22b681abf0d3b1ed37fd3d07696efe182fb0311396e4d198fcb457153b6637a5a0dd42ba22780bb6ae9f0b0419f9c3241284b64765e37c1e2efcc6345d1605af822c7c8467f7151a3a477673455bb2cc8291680c5bcbb87377e047195d1c995a0940ce02f9ec4a9c5f3c54a75f3b3ff0c1b0d9ea96e722b879ddca3c9410630fc2b05cdbfff96e7471a79443652cb2dfd16adbc524de322b910bc56f4cdfb832726837af83c9c3159c3db9570db66b7ba3330b5263f20bebc41b683ddf41e9ec76c6035fc9b902cd3afddf14e64ec7cf778d0bf53563ce076aef6ba4815abb603bb309f985038efe68be6b33a31e4c69f613a389f09d9d5dd2ac74f893a3b5fb826695e159a629a32b843a16624b5674ce66d152606b2d60c3eb46a24329e1f9c3ba07f8b5"], 0xea) ftruncate(r0, 0x0) r2 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x40000) preadv(r2, &(0x7f0000000100)=[{&(0x7f0000000180)=""/208, 0xd0}, {&(0x7f0000000480)=""/200, 0xc8}, {&(0x7f00000000c0)=""/59, 0x3b}], 0x3, 0x9c4, 0x212) [ 481.517999][T32011] FAT-fs (loop3): bogus number of reserved sectors [ 481.524714][T32011] FAT-fs (loop3): Can't find a valid FAT filesystem 14:34:20 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502111, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 14:34:20 executing program 1: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="04fe050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) 14:34:20 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) setxattr$security_ima(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), &(0x7f0000000180)=@v1={0x2, "3de6ee47"}, 0x5, 0x2) ftruncate(r0, 0x0) 14:34:20 executing program 2: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r5, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r8}, {}, {r7}, {r7}, {r7}, {}, {}, {0x0, r8}, {}, {0x0, r2}, {}, {}, {r6, r8}, {0x0, r8}, {}, {r7, r8}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {}, {0x0, r8}, {}, {}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {r7}, {}, {0x0, r8}, {r7, r8}, {0x0, r8}, {r6}, {}, {0x0, r8}, {r7}, {}, {}, {r7}, {0x0, r8}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {}, {}, {r7}, {r6}, {}, {r7, r8}, {}, {}, {0x0, r8}, {}, {}, {r7}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {r7}, {}, {0x0, r8}, {r6}, {r7, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7, r8}, {r6, r8}, {r7}, {}, {r6}, {r6}, {}, {}, {r6}, {}, {}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {r6, r8}, {0x0, r8}, {}, {r6, r8}, {}, {}, {}, {r7}, {}, {}, {}, {r6}, {}, {r7}, {}, {}, {r7}, {0x0, r8}, {}, {}, {}, {}, {0x0, r8}, {}, {r6}, {}, {}, {}, {0x0, r8}, {r6, r8}, {r7}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {r6}, {r7}, {0x0, r8}, {}, {}, {r6}, {0x0, r8}, {r7}, {r6, r8}, {0x0, r8}, {}, {0x0, r8}, {}, {}, {0x0, r8}, {r7}, {}, {}, {r6}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {r6}, {r7}, {r7, r8}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {r7}, {0x0, r8}, {}, {r7}, {r7}, {0x0, r3}, {}, {}, {}, {}, {0x0, r8}, {r6}, {}, {}, {0x0, r8}, {}, {r7, r8}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {}, {}, {r6, r8}, {}, {}, {r7}, {r6}, {0x0, r8}, {}, {0x0, r8}, {r7}, {r7}, {r6}, {}, {0x0, r8}, {r7}], 0x1, "2156816c73038c"}) r9 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r9, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:34:20 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x8, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{0x0, r6}, {}, {r5}, {r5}, {r5}, {}, {}, {0x0, r6}, {}, {0x0, r1}, {}, {}, {r4, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {r5}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r4}, {}, {0x0, r6}, {r5}, {}, {}, {r5}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {r5, r6}, {}, {r2, r6}, {0x0, r6}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {r4}, {0x0, r6}, {}, {}, {r4}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {r5}, {}, {0x0, r6}, {r4}, {r5, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {r4, r6}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {}, {}, {r5}, {}, {}, {0x0, r6}, {r4}, {}, {r5}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {r5}, {}, {}, {}, {r4}, {r4}, {}, {r4}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {}, {}, {r4}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r4}, {r5}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {r5}, {r5}, {0x0, r3}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {r4}, {}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {r4, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {r5}, {r4}, {}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {}, {r4, r6}], 0x1, "2156816c73038c"}) r7 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 481.824513][T32033] loop2: detected capacity change from 0 to 264192 14:34:20 executing program 1: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400070900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) [ 481.866049][T32043] loop4: detected capacity change from 0 to 264192 14:34:20 executing program 5: sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, 0x1, 0x4, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0xfffffff8}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x6}, @NFULA_CFG_MODE={0xa, 0x2, {0x5}}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x9}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x1d5}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x80, 0x1}}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0x1, 0x1}}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}]}, 0x70}}, 0x10) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000000c0)}, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0x2, 0xffffffffffffffff, 0x1) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) ftruncate(r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)=']-+-,,\x00') 14:34:20 executing program 1: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400090900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) 14:34:20 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r2, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:34:20 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) read$char_usb(r0, 0x0, 0x0) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0xf011, 0x74, 0x8}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x0) 14:34:20 executing program 1: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="04000b0900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) 14:34:20 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x8, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{0x0, r6}, {}, {r5}, {r5}, {r5}, {}, {}, {0x0, r6}, {}, {0x0, r1}, {}, {}, {r4, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {r5}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r4}, {}, {0x0, r6}, {r5}, {}, {}, {r5}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {r5, r6}, {}, {r2, r6}, {0x0, r6}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {r4}, {0x0, r6}, {}, {}, {r4}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {r5}, {}, {0x0, r6}, {r4}, {r5, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {r4, r6}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {}, {}, {r5}, {}, {}, {0x0, r6}, {r4}, {}, {r5}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {r5}, {}, {}, {}, {r4}, {r4}, {}, {r4}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {}, {}, {r4}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r4}, {r5}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {r5}, {r5}, {0x0, r3}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {r4}, {}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {r4, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {r5}, {r4}, {}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {}, {r4, r6}], 0x1, "2156816c73038c"}) r7 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 482.379454][T32078] loop4: detected capacity change from 0 to 264192 [ 482.404595][ C0] scsi_io_completion_action: 9 callbacks suppressed [ 482.404624][ C0] sd 0:0:1:0: tag#453 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 482.420988][ C0] sd 0:0:1:0: tag#453 CDB: opcode=0xe5 (vendor) [ 482.427261][ C0] sd 0:0:1:0: tag#453 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 482.436230][ C0] sd 0:0:1:0: tag#453 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 482.445193][ C0] sd 0:0:1:0: tag#453 CDB[20]: ba 14:34:21 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502112, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 14:34:21 executing program 2: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r5, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r8}, {}, {r7}, {r7}, {r7}, {}, {}, {0x0, r8}, {}, {0x0, r2}, {}, {}, {r6, r8}, {0x0, r8}, {}, {r7, r8}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {}, {0x0, r8}, {}, {}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {r7}, {}, {0x0, r8}, {r7, r8}, {0x0, r8}, {r6}, {}, {0x0, r8}, {r7}, {}, {}, {r7}, {0x0, r8}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {}, {}, {r7}, {r6}, {}, {r7, r8}, {}, {}, {0x0, r8}, {}, {}, {r7}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {r7}, {}, {0x0, r8}, {r6}, {r7, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7, r8}, {r6, r8}, {r7}, {}, {r6}, {r6}, {}, {}, {r6}, {}, {}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {r6, r8}, {0x0, r8}, {}, {r6, r8}, {}, {}, {}, {r7}, {}, {}, {}, {r6}, {}, {r7}, {}, {}, {r7}, {0x0, r8}, {}, {}, {}, {}, {0x0, r8}, {}, {r6}, {}, {}, {}, {0x0, r8}, {r6, r8}, {r7}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {r6}, {r7}, {0x0, r8}, {}, {}, {r6}, {0x0, r8}, {r7}, {r6, r8}, {0x0, r8}, {}, {0x0, r8}, {}, {}, {0x0, r8}, {r7}, {}, {}, {r6}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {r6}, {r7}, {r7, r8}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {r7}, {0x0, r8}, {}, {r7}, {r7}, {0x0, r3}, {}, {}, {}, {}, {0x0, r8}, {r6}, {}, {}, {0x0, r8}, {}, {r7, r8}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {}, {}, {r6, r8}, {}, {}, {r7}, {r6}, {0x0, r8}, {}, {0x0, r8}, {r7}, {r7}, {r6}, {}, {0x0, r8}, {r7}], 0x1, "2156816c73038c"}) r9 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r9, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:34:21 executing program 1: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400250900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) 14:34:21 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) read$char_usb(r1, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xa9, 0x0, 0x1, 0x9b, 0x0, 0x9, 0x1088, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10001, 0x1, @perf_bp={&(0x7f0000000080), 0x2}, 0xb900f63840761fa4, 0xe2a, 0x4, 0x2, 0x8, 0x1, 0x40, 0x0, 0x10001, 0x0, 0x7}, 0xffffffffffffffff, 0x7, r1, 0x0) 14:34:21 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x8, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{0x0, r6}, {}, {r5}, {r5}, {r5}, {}, {}, {0x0, r6}, {}, {0x0, r1}, {}, {}, {r4, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {r5}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r4}, {}, {0x0, r6}, {r5}, {}, {}, {r5}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {r5, r6}, {}, {r2, r6}, {0x0, r6}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {r4}, {0x0, r6}, {}, {}, {r4}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {r5}, {}, {0x0, r6}, {r4}, {r5, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {r4, r6}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {}, {}, {r5}, {}, {}, {0x0, r6}, {r4}, {}, {r5}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {r5}, {}, {}, {}, {r4}, {r4}, {}, {r4}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {}, {}, {r4}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r4}, {r5}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {r5}, {r5}, {0x0, r3}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {r4}, {}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {r4, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {r5}, {r4}, {}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {}, {r4, r6}], 0x1, "2156816c73038c"}) r7 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 482.681497][ T22] kauditd_printk_skb: 2 callbacks suppressed [ 482.681509][ T22] audit: type=1326 audit(1631457261.280:95892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=32039 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x0 14:34:21 executing program 1: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400030900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) [ 482.762830][ T22] audit: type=1326 audit(1631457261.360:95893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=32104 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x0 [ 482.795198][T32111] loop4: detected capacity change from 0 to 264192 [ 482.804539][T32113] loop2: detected capacity change from 0 to 264192 14:34:21 executing program 1: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400040900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) 14:34:21 executing program 1: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400070900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) [ 482.861494][ C1] sd 0:0:1:0: tag#454 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 482.871305][ C1] sd 0:0:1:0: tag#454 CDB: opcode=0xe5 (vendor) [ 482.877671][ C1] sd 0:0:1:0: tag#454 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 482.886631][ C1] sd 0:0:1:0: tag#454 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 482.895587][ C1] sd 0:0:1:0: tag#454 CDB[20]: ba 14:34:21 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r2, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:34:21 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) recvmmsg(r0, &(0x7f00000017c0)=[{{&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000100)=""/5, 0x5}, {&(0x7f0000000180)=""/94, 0x5e}], 0x2, &(0x7f0000000240)=""/109, 0x6d}, 0x6}, {{&(0x7f00000002c0)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000340)=""/192, 0xc0}], 0x1, &(0x7f0000000440)=""/4096, 0x1000}, 0xf21}, {{&(0x7f0000001440)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/227, 0xe3}, {&(0x7f00000015c0)=""/158, 0x9e}], 0x2, &(0x7f00000016c0)=""/250, 0xfa}, 0x8}], 0x3, 0x10061, &(0x7f0000001880)={0x0, 0x989680}) ftruncate(r0, 0x0) 14:34:21 executing program 1: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400080900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) 14:34:21 executing program 2: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r5, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r8}, {}, {r7}, {r7}, {r7}, {}, {}, {0x0, r8}, {}, {0x0, r2}, {}, {}, {r6, r8}, {0x0, r8}, {}, {r7, r8}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {}, {0x0, r8}, {}, {}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {r7}, {}, {0x0, r8}, {r7, r8}, {0x0, r8}, {r6}, {}, {0x0, r8}, {r7}, {}, {}, {r7}, {0x0, r8}, {}, {0x0, r8}, {}, {0x0, r8}, {}, {r6}, {}, {r7}, {r6}, {}, {r7, r8}, {}, {}, {0x0, r8}, {}, {}, {r7}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {r7}, {}, {0x0, r8}, {r6}, {r7, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7, r8}, {r6, r8}, {r7}, {}, {r6}, {r6}, {}, {}, {r6}, {}, {}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {r6, r8}, {0x0, r8}, {}, {r6, r8}, {}, {}, {}, {r7}, {}, {}, {}, {r6}, {}, {r7}, {}, {}, {r7}, {0x0, r8}, {}, {}, {}, {}, {0x0, r8}, {}, {r6}, {}, {}, {}, {0x0, r8}, {r6, r8}, {r7}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {r6}, {r7}, {0x0, r8}, {}, {}, {r6}, {0x0, r8}, {r7}, {r6, r8}, {0x0, r8}, {}, {0x0, r8}, {}, {}, {0x0, r8}, {r7}, {}, {}, {r6}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {r6}, {r7}, {r7, r8}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {r7}, {0x0, r8}, {}, {r7}, {r7}, {0x0, r3}, {}, {}, {}, {}, {0x0, r8}, {r6}, {}, {}, {0x0, r8}, {}, {r7, r8}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {}, {}, {r6, r8}, {}, {}, {r7}, {r6}, {0x0, r8}, {}, {0x0, r8}, {r7}, {r7}, {r6}, {}, {0x0, r8}, {r7}], 0x1, "2156816c73038c"}) r9 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r9, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 483.261184][T32149] loop2: detected capacity change from 0 to 264192 [ 483.291779][ C1] sd 0:0:1:0: tag#455 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 483.302174][ C1] sd 0:0:1:0: tag#455 CDB: opcode=0xe5 (vendor) [ 483.308556][ C1] sd 0:0:1:0: tag#455 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 483.315946][ C0] sd 0:0:1:0: tag#456 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 483.317508][ C1] sd 0:0:1:0: tag#455 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 483.327210][ C0] sd 0:0:1:0: tag#456 CDB: opcode=0xe5 (vendor) [ 483.336214][ C1] sd 0:0:1:0: tag#455 CDB[20]: ba [ 483.342430][ C0] sd 0:0:1:0: tag#456 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 483.356425][ C0] sd 0:0:1:0: tag#456 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 483.365419][ C0] sd 0:0:1:0: tag#456 CDB[20]: ba [ 483.589453][ T22] audit: type=1326 audit(1631457262.190:95894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=32104 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x0 14:34:22 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502125, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 14:34:22 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x8, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{0x0, r6}, {}, {r5}, {r5}, {r5}, {}, {}, {0x0, r6}, {}, {0x0, r1}, {}, {}, {r4, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {r5}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r4}, {}, {0x0, r6}, {r5}, {}, {}, {r5}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {r5, r6}, {}, {r2, r6}, {0x0, r6}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {r4}, {}, {}, {}, {r4, r6}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {r5}, {}, {0x0, r6}, {r4}, {r5, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {r4, r6}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {}, {}, {r5}, {}, {}, {0x0, r6}, {r4}, {}, {r5}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {r5}, {}, {}, {}, {r4}, {r4}, {}, {r4}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {}, {}, {r4}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r4}, {r5}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {r5}, {r5}, {0x0, r3}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {r4}, {}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {r4, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {r5}, {r4}, {}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {}, {r4, r6}], 0x1, "2156816c73038c"}) r7 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:34:22 executing program 1: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400090900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) 14:34:22 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff91, 0x0, 0x401}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) read$char_usb(r1, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000080)) 14:34:22 executing program 2: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r5, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r8}, {}, {r7}, {r7}, {r7}, {}, {}, {0x0, r8}, {}, {0x0, r2}, {}, {}, {r6, r8}, {0x0, r8}, {}, {r7, r8}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {}, {0x0, r8}, {}, {}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {r7}, {}, {0x0, r8}, {r7, r8}, {0x0, r8}, {r6}, {}, {0x0, r8}, {r7}, {}, {}, {r7}, {0x0, r8}, {}, {0x0, r8}, {}, {}, {}, {r6}, {}, {r7}, {r6}, {}, {r7, r8}, {}, {}, {0x0, r8}, {}, {}, {r7}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {r7}, {}, {0x0, r8}, {r6}, {r7, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7, r8}, {r6, r8}, {r7}, {}, {r6}, {r6}, {}, {}, {r6}, {}, {}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {r6, r8}, {0x0, r8}, {}, {r6, r8}, {}, {}, {}, {r7}, {}, {}, {}, {r6}, {}, {r7}, {}, {}, {r7}, {0x0, r8}, {}, {}, {}, {}, {0x0, r8}, {}, {r6}, {}, {}, {}, {0x0, r8}, {r6, r8}, {r7}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {r6}, {r7}, {0x0, r8}, {}, {}, {r6}, {0x0, r8}, {r7}, {r6, r8}, {0x0, r8}, {}, {0x0, r8}, {}, {}, {0x0, r8}, {r7}, {}, {}, {r6}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {r6}, {r7}, {r7, r8}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {r7}, {0x0, r8}, {}, {r7}, {r7}, {0x0, r3}, {}, {}, {}, {}, {0x0, r8}, {r6}, {}, {}, {0x0, r8}, {}, {r7, r8}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {}, {}, {r6, r8}, {}, {}, {r7}, {r6}, {0x0, r8}, {}, {0x0, r8}, {r7}, {r7}, {r6}, {}, {0x0, r8}, {r7}], 0x1, "2156816c73038c"}) r9 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r9, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 483.679872][T32175] loop4: detected capacity change from 0 to 264192 [ 483.696074][T32184] loop2: detected capacity change from 0 to 264192 14:34:22 executing program 1: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="04000b0900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) 14:34:22 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./bus\x00') r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x0) [ 483.714203][ T22] audit: type=1326 audit(1631457262.320:95895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=32180 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x0 14:34:22 executing program 1: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400250900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) [ 483.804660][ C1] sd 0:0:1:0: tag#457 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 483.814452][ C1] sd 0:0:1:0: tag#457 CDB: opcode=0xe5 (vendor) [ 483.820691][ C1] sd 0:0:1:0: tag#457 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 483.829739][ C1] sd 0:0:1:0: tag#457 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 483.839766][ C1] sd 0:0:1:0: tag#457 CDB[20]: ba 14:34:22 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r2, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:34:22 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) ftruncate(r0, 0x0) 14:34:22 executing program 1: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050902000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) 14:34:22 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x8, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{0x0, r6}, {}, {r5}, {r5}, {r5}, {}, {}, {0x0, r6}, {}, {0x0, r1}, {}, {}, {r4, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {r5}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r4}, {}, {0x0, r6}, {r5}, {}, {}, {r5}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {r5, r6}, {}, {r2, r6}, {0x0, r6}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {r4}, {}, {}, {}, {r4, r6}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {r5}, {}, {0x0, r6}, {r4}, {r5, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {r4, r6}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {}, {}, {r5}, {}, {}, {0x0, r6}, {r4}, {}, {r5}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {r5}, {}, {}, {}, {r4}, {r4}, {}, {r4}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {}, {}, {r4}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r4}, {r5}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {r5}, {r5}, {0x0, r3}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {r4}, {}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {r4, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {r5}, {r4}, {}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {}, {r4, r6}], 0x1, "2156816c73038c"}) r7 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 484.189585][T32219] loop4: detected capacity change from 0 to 264192 [ 484.244005][ C1] sd 0:0:1:0: tag#458 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 484.253814][ C1] sd 0:0:1:0: tag#458 CDB: opcode=0xe5 (vendor) [ 484.260151][ C1] sd 0:0:1:0: tag#458 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 484.269130][ C1] sd 0:0:1:0: tag#458 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 484.278129][ C1] sd 0:0:1:0: tag#458 CDB[20]: ba [ 484.527296][ T22] audit: type=1326 audit(1631457263.130:95896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=32180 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x0 14:34:23 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502148, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 14:34:23 executing program 1: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050903000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) 14:34:23 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x0, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x1, 0xffffffffffffffff, &(0x7f0000000200)="caef902f033914fd7c766e5bae46ddb822dbf86edef287c67638a3976f295947ebed460244806a282638c192541be90b655fdb5d4235650e72005a56806e2b804d24162c05a77a6237324b7b6ea6e85edd5c58ae9c933166d6475c5b23d3", 0x5e, 0x24e3, 0x0, 0x1}]) ftruncate(r0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x84000001}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, 0x3f7, 0x1, 0x70bd25, 0x25dfdbfc, {0x5, 0x5, './bus', './bus'}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x400d012) 14:34:23 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x8, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{0x0, r6}, {}, {r5}, {r5}, {r5}, {}, {}, {0x0, r6}, {}, {0x0, r1}, {}, {}, {r4, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {r5}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r4}, {}, {0x0, r6}, {r5}, {}, {}, {r5}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {r5, r6}, {}, {r2, r6}, {0x0, r6}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {r4}, {}, {}, {}, {r4, r6}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {r5}, {}, {0x0, r6}, {r4}, {r5, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {r4, r6}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {}, {}, {r5}, {}, {}, {0x0, r6}, {r4}, {}, {r5}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {r5}, {}, {}, {}, {r4}, {r4}, {}, {r4}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {}, {}, {r4}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r4}, {r5}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {r5}, {r5}, {0x0, r3}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {r4}, {}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {r4, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {r5}, {r4}, {}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {}, {r4, r6}], 0x1, "2156816c73038c"}) r7 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:34:23 executing program 2: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r5, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r8}, {}, {r7}, {r7}, {r7}, {}, {}, {0x0, r8}, {}, {0x0, r2}, {}, {}, {r6, r8}, {0x0, r8}, {}, {r7, r8}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {}, {0x0, r8}, {}, {}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {r7}, {}, {0x0, r8}, {r7, r8}, {0x0, r8}, {r6}, {}, {0x0, r8}, {r7}, {}, {}, {r7}, {0x0, r8}, {}, {0x0, r8}, {}, {}, {}, {r6}, {}, {r7}, {r6}, {}, {r7, r8}, {}, {}, {0x0, r8}, {}, {}, {r7}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {r7}, {}, {0x0, r8}, {r6}, {r7, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7, r8}, {r6, r8}, {r7}, {}, {r6}, {r6}, {}, {}, {r6}, {}, {}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {r6, r8}, {0x0, r8}, {}, {r6, r8}, {}, {}, {}, {r7}, {}, {}, {}, {r6}, {}, {r7}, {}, {}, {r7}, {0x0, r8}, {}, {}, {}, {}, {0x0, r8}, {}, {r6}, {}, {}, {}, {0x0, r8}, {r6, r8}, {r7}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {r6}, {r7}, {0x0, r8}, {}, {}, {r6}, {0x0, r8}, {r7}, {r6, r8}, {0x0, r8}, {}, {0x0, r8}, {}, {}, {0x0, r8}, {r7}, {}, {}, {r6}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {r6}, {r7}, {r7, r8}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {r7}, {0x0, r8}, {}, {r7}, {r7}, {0x0, r3}, {}, {}, {}, {}, {0x0, r8}, {r6}, {}, {}, {0x0, r8}, {}, {r7, r8}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {}, {}, {r6, r8}, {}, {}, {r7}, {r6}, {0x0, r8}, {}, {0x0, r8}, {r7}, {r7}, {r6}, {}, {0x0, r8}, {r7}], 0x1, "2156816c73038c"}) r9 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r9, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:34:23 executing program 1: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050904000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) [ 484.644286][T32253] loop4: detected capacity change from 0 to 264192 [ 484.652404][ T22] audit: type=1326 audit(1631457263.250:95897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=32246 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x0 14:34:23 executing program 5: setxattr$security_selinux(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0), &(0x7f0000000100)='system_u:object_r:netcontrol_device_t:s0\x00', 0x29, 0x2) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x0) [ 484.718437][T32263] loop2: detected capacity change from 0 to 264192 [ 484.756024][T32247] ================================================================== [ 484.761556][ C1] sd 0:0:1:0: tag#459 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 484.764122][T32247] BUG: KCSAN: data-race in copy_page_to_iter / fat_set_state [ 484.764141][T32247] [ 484.764145][T32247] write to 0xffff88813fd34025 of 1 bytes by task 32263 on cpu 1: [ 484.764161][T32247] fat_set_state+0x16c/0x1d0 [ 484.773900][ C1] sd 0:0:1:0: tag#459 CDB: opcode=0xe5 (vendor) [ 484.782000][T32247] fat_fill_super+0x26ca/0x2b10 [ 484.784338][ C1] sd 0:0:1:0: tag#459 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 484.791999][T32247] msdos_fill_super+0x29/0x30 [ 484.796601][ C1] sd 0:0:1:0: tag#459 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 484.802882][T32247] mount_bdev+0x1e8/0x290 [ 484.807746][ C1] sd 0:0:1:0: tag#459 CDB[20]: ba [ 484.816639][T32247] msdos_mount+0x2d/0x40 [ 484.816657][T32247] legacy_get_tree+0x70/0xc0 [ 484.848319][T32247] vfs_get_tree+0x4a/0x1a0 [ 484.852758][T32247] path_mount+0x11ec/0x1d20 [ 484.857296][T32247] __se_sys_mount+0x24b/0x2f0 [ 484.861973][T32247] __x64_sys_mount+0x63/0x70 14:34:23 executing program 1: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050905000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) [ 484.866560][T32247] do_syscall_64+0x44/0xa0 [ 484.870975][T32247] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 484.876870][T32247] [ 484.879183][T32247] read to 0xffff88813fd34000 of 4096 bytes by task 32247 on cpu 0: [ 484.887066][T32247] copy_page_to_iter+0x2cb/0x950 [ 484.892008][T32247] filemap_read+0xf06/0x1240 [ 484.896597][T32247] generic_file_read_iter+0x75/0x2c0 [ 484.901882][T32247] blkdev_read_iter+0xe1/0x140 [ 484.906639][T32247] vfs_read+0x672/0x750 [ 484.910791][T32247] ksys_read+0xd9/0x190 [ 484.914938][T32247] __x64_sys_read+0x3e/0x50 [ 484.919446][T32247] do_syscall_64+0x44/0xa0 [ 484.923864][T32247] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 484.929757][T32247] [ 484.932101][T32247] Reported by Kernel Concurrency Sanitizer on: [ 484.938241][T32247] CPU: 0 PID: 32247 Comm: systemd-udevd Not tainted 5.14.0-syzkaller #0 [ 484.946563][T32247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 484.956637][T32247] ================================================================== [ 484.981070][ T22] audit: type=1400 audit(1631457263.580:95898): avc: denied { relabelto } for pid=32267 comm="syz-executor.5" name="bus" dev="sda1" ino=14257 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:netcontrol_device_t:s0 tclass=file permissive=1 14:34:23 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r2, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:34:23 executing program 1: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050906000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) 14:34:23 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3a) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r1, 0x9, 0x5) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x7, 0x4, 0x5, 0x9, 0x0, 0x2, 0x80014, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_config_ext={0x100, 0x5}, 0x4, 0x3, 0x0, 0x4, 0x7f, 0x1, 0x9, 0x0, 0x8879, 0x0, 0x3}, r1, 0x8, 0xffffffffffffffff, 0x1) ptrace$setregs(0xf, 0xffffffffffffffff, 0x7, &(0x7f0000000100)="284a8dff892844417935243e6f1eeb49cca326bfd7196a1d655de4a552c06393370f57931c0960") 14:34:23 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x8, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{0x0, r6}, {}, {r5}, {r5}, {r5}, {}, {}, {0x0, r6}, {}, {0x0, r1}, {}, {}, {r4, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {r5}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r4}, {}, {0x0, r6}, {r5}, {}, {}, {r5}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {r5, r6}, {}, {r2, r6}, {0x0, r6}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {r4, r6}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {r5}, {}, {0x0, r6}, {r4}, {r5, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {r4, r6}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {}, {}, {r5}, {}, {}, {0x0, r6}, {r4}, {}, {r5}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {r5}, {}, {}, {}, {r4}, {r4}, {}, {r4}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {}, {}, {r4}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r4}, {r5}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {r5}, {r5}, {0x0, r3}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {r4}, {}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {r4, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {r5}, {r4}, {}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {}, {r4, r6}], 0x1, "2156816c73038c"}) r7 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 485.081644][ T22] audit: type=1400 audit(1631457263.610:95899): avc: denied { write } for pid=32267 comm="syz-executor.5" name="bus" dev="sda1" ino=14257 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:netcontrol_device_t:s0 tclass=file permissive=1 [ 485.149582][T32288] loop3: detected capacity change from 0 to 264192 [ 485.160256][ T22] audit: type=1400 audit(1631457263.610:95900): avc: denied { open } for pid=32267 comm="syz-executor.5" path="/root/syzkaller-testdir861349975/syzkaller.MaBNN0/690/bus" dev="sda1" ino=14257 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:netcontrol_device_t:s0 tclass=file permissive=1 [ 485.217994][T32288] FAT-fs (loop3): bogus number of reserved sectors [ 485.224768][T32288] FAT-fs (loop3): Can't find a valid FAT filesystem [ 485.231836][ T22] audit: type=1400 audit(1631457263.640:95901): avc: denied { getattr } for pid=1127 comm="syz-executor.5" path="/root/syzkaller-testdir861349975/syzkaller.MaBNN0/690/bus" dev="sda1" ino=14257 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:netcontrol_device_t:s0 tclass=file permissive=1 [ 485.264663][T32296] loop4: detected capacity change from 0 to 264192 [ 485.283279][ C0] sd 0:0:1:0: tag#460 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 485.293055][ C0] sd 0:0:1:0: tag#460 CDB: opcode=0xe5 (vendor) [ 485.299323][ C0] sd 0:0:1:0: tag#460 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 485.308294][ C0] sd 0:0:1:0: tag#460 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 485.317365][ C0] sd 0:0:1:0: tag#460 CDB[20]: ba 14:34:24 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc050214c, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 14:34:24 executing program 2: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r5, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r8}, {}, {r7}, {r7}, {r7}, {}, {}, {0x0, r8}, {}, {0x0, r2}, {}, {}, {r6, r8}, {0x0, r8}, {}, {r7, r8}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {}, {0x0, r8}, {}, {}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {r7}, {}, {0x0, r8}, {r7, r8}, {0x0, r8}, {r6}, {}, {0x0, r8}, {r7}, {}, {}, {r7}, {0x0, r8}, {}, {0x0, r8}, {}, {}, {}, {r6}, {}, {r7}, {r6}, {}, {r7, r8}, {}, {}, {0x0, r8}, {}, {}, {r7}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {r7}, {}, {0x0, r8}, {r6}, {r7, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7, r8}, {r6, r8}, {r7}, {}, {r6}, {r6}, {}, {}, {r6}, {}, {}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {r6, r8}, {0x0, r8}, {}, {r6, r8}, {}, {}, {}, {r7}, {}, {}, {}, {r6}, {}, {r7}, {}, {}, {r7}, {0x0, r8}, {}, {}, {}, {}, {0x0, r8}, {}, {r6}, {}, {}, {}, {0x0, r8}, {r6, r8}, {r7}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {r6}, {r7}, {0x0, r8}, {}, {}, {r6}, {0x0, r8}, {r7}, {r6, r8}, {0x0, r8}, {}, {0x0, r8}, {}, {}, {0x0, r8}, {r7}, {}, {}, {r6}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {r6}, {r7}, {r7, r8}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {r7}, {0x0, r8}, {}, {r7}, {r7}, {0x0, r3}, {}, {}, {}, {}, {0x0, r8}, {r6}, {}, {}, {0x0, r8}, {}, {r7, r8}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {}, {}, {r6, r8}, {}, {}, {r7}, {r6}, {0x0, r8}, {}, {0x0, r8}, {r7}, {r7}, {r6}, {}, {0x0, r8}, {r7}], 0x1, "2156816c73038c"}) r9 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r9, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:34:24 executing program 1: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050907000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) 14:34:24 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) read$char_usb(r0, 0x0, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = socket$packet(0x11, 0x3, 0x300) write(r2, &(0x7f0000000180)="ad94b667b943696f0eacbbd5046efe9daaa3cd855f875a336f0e7f82f1976199c08041077c07760c3244d604a32fcafa3b6e96e4099f79694374658778a1e74b0d530cdaebcb74f9e4565eef90aff40c90cfd824589f4a0a7d53325269ba357f241d0ec5bc3b11b4f40dcd1addbd3eff5781b7994d7029d462257e786dd6b09e0d59d03f1bf23caf749740d4ab2a3a59be2ebb40004499e8ca73f8a05e223b55b4094cf24e0575ae02bb712041c4f8af3a9aa8ea192119811bfa5f5cff22c18cfb56da8edfb80b6ee0330f9c6ad331f95e3fb706f92a2cf1ee7aca7888a90cb9f53a2706dc8467", 0xe7) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) ftruncate(r1, 0x0) 14:34:24 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x8, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{0x0, r6}, {}, {r5}, {r5}, {r5}, {}, {}, {0x0, r6}, {}, {0x0, r1}, {}, {}, {r4, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {r5}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r4}, {}, {0x0, r6}, {r5}, {}, {}, {r5}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {r5, r6}, {}, {r2, r6}, {0x0, r6}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {r4, r6}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {r5}, {}, {0x0, r6}, {r4}, {r5, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {r4, r6}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {}, {}, {r5}, {}, {}, {0x0, r6}, {r4}, {}, {r5}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {r5}, {}, {}, {}, {r4}, {r4}, {}, {r4}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {}, {}, {r4}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r4}, {r5}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {r5}, {r5}, {0x0, r3}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {r4}, {}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {r4, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {r5}, {r4}, {}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {}, {r4, r6}], 0x1, "2156816c73038c"}) r7 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 485.575554][T32320] loop2: detected capacity change from 0 to 264192 [ 485.587342][T32325] loop4: detected capacity change from 0 to 264192 14:34:24 executing program 1: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050908000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) [ 485.619122][ C0] sd 0:0:1:0: tag#461 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 485.628956][ C0] sd 0:0:1:0: tag#461 CDB: opcode=0xe5 (vendor) [ 485.635238][ C0] sd 0:0:1:0: tag#461 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 485.644209][ C0] sd 0:0:1:0: tag#461 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 485.653156][ C0] sd 0:0:1:0: tag#461 CDB[20]: ba 14:34:24 executing program 1: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090a000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) 14:34:24 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) read$char_usb(r0, 0x0, 0x0) close(r0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x0) 14:34:24 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r2, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:34:24 executing program 1: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090b000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) 14:34:24 executing program 5: perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdfcf}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x0) 14:34:24 executing program 2: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r5, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r8}, {}, {r7}, {r7}, {r7}, {}, {}, {0x0, r8}, {}, {0x0, r2}, {}, {}, {r6, r8}, {0x0, r8}, {}, {r7, r8}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {}, {0x0, r8}, {}, {}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {r7}, {}, {0x0, r8}, {r7, r8}, {0x0, r8}, {r6}, {}, {0x0, r8}, {r7}, {}, {}, {r7}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {}, {r6}, {}, {r7}, {r6}, {}, {r7, r8}, {}, {}, {0x0, r8}, {}, {}, {r7}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {r7}, {}, {0x0, r8}, {r6}, {r7, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7, r8}, {r6, r8}, {r7}, {}, {r6}, {r6}, {}, {}, {r6}, {}, {}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {r6, r8}, {0x0, r8}, {}, {r6, r8}, {}, {}, {}, {r7}, {}, {}, {}, {r6}, {}, {r7}, {}, {}, {r7}, {0x0, r8}, {}, {}, {}, {}, {0x0, r8}, {}, {r6}, {}, {}, {}, {0x0, r8}, {r6, r8}, {r7}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {r6}, {r7}, {0x0, r8}, {}, {}, {r6}, {0x0, r8}, {r7}, {r6, r8}, {0x0, r8}, {}, {0x0, r8}, {}, {}, {0x0, r8}, {r7}, {}, {}, {r6}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {r6}, {r7}, {r7, r8}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {r7}, {0x0, r8}, {}, {r7}, {r7}, {0x0, r3}, {}, {}, {}, {}, {0x0, r8}, {r6}, {}, {}, {0x0, r8}, {}, {r7, r8}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {}, {}, {r6, r8}, {}, {}, {r7}, {r6}, {0x0, r8}, {}, {0x0, r8}, {r7}, {r7}, {r6}, {}, {0x0, r8}, {r7}], 0x1, "2156816c73038c"}) r9 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r9, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 486.046637][T32361] loop3: detected capacity change from 0 to 264192 [ 486.063917][T32361] FAT-fs (loop3): bogus number of reserved sectors [ 486.070442][T32361] FAT-fs (loop3): Can't find a valid FAT filesystem [ 486.091370][T32369] loop2: detected capacity change from 0 to 264192 [ 486.142765][ C0] sd 0:0:1:0: tag#462 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 486.152544][ C0] sd 0:0:1:0: tag#462 CDB: opcode=0xe5 (vendor) [ 486.158835][ C0] sd 0:0:1:0: tag#462 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 486.167806][ C0] sd 0:0:1:0: tag#462 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 486.176777][ C0] sd 0:0:1:0: tag#462 CDB[20]: ba 14:34:25 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502168, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 14:34:25 executing program 1: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050910000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) 14:34:25 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) read$char_usb(r2, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r2) read$char_usb(r1, 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0) 14:34:25 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x8, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{0x0, r6}, {}, {r5}, {r5}, {r5}, {}, {}, {0x0, r6}, {}, {0x0, r1}, {}, {}, {r4, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {r5}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r4}, {}, {0x0, r6}, {r5}, {}, {}, {r5}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {r5, r6}, {}, {r2, r6}, {0x0, r6}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {r4, r6}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {r5}, {}, {0x0, r6}, {r4}, {r5, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {r4, r6}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {}, {}, {r5}, {}, {}, {0x0, r6}, {r4}, {}, {r5}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {r5}, {}, {}, {}, {r4}, {r4}, {}, {r4}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {}, {}, {r4}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r4}, {r5}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {r5}, {r5}, {0x0, r3}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {r4}, {}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {r4, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {r5}, {r4}, {}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {}, {r4, r6}], 0x1, "2156816c73038c"}) r7 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:34:25 executing program 2: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r5, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r8}, {}, {r7}, {r7}, {r7}, {}, {}, {0x0, r8}, {}, {0x0, r2}, {}, {}, {r6, r8}, {0x0, r8}, {}, {r7, r8}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {}, {0x0, r8}, {}, {}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {r7}, {}, {0x0, r8}, {r7, r8}, {0x0, r8}, {r6}, {}, {0x0, r8}, {r7}, {}, {}, {r7}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {}, {r6}, {}, {r7}, {r6}, {}, {r7, r8}, {}, {}, {0x0, r8}, {}, {}, {r7}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {r7}, {}, {0x0, r8}, {r6}, {r7, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7, r8}, {r6, r8}, {r7}, {}, {r6}, {r6}, {}, {}, {r6}, {}, {}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {r6, r8}, {0x0, r8}, {}, {r6, r8}, {}, {}, {}, {r7}, {}, {}, {}, {r6}, {}, {r7}, {}, {}, {r7}, {0x0, r8}, {}, {}, {}, {}, {0x0, r8}, {}, {r6}, {}, {}, {}, {0x0, r8}, {r6, r8}, {r7}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {r6}, {r7}, {0x0, r8}, {}, {}, {r6}, {0x0, r8}, {r7}, {r6, r8}, {0x0, r8}, {}, {0x0, r8}, {}, {}, {0x0, r8}, {r7}, {}, {}, {r6}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {r6}, {r7}, {r7, r8}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {r7}, {0x0, r8}, {}, {r7}, {r7}, {0x0, r3}, {}, {}, {}, {}, {0x0, r8}, {r6}, {}, {}, {0x0, r8}, {}, {r7, r8}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {}, {}, {r6, r8}, {}, {}, {r7}, {r6}, {0x0, r8}, {}, {0x0, r8}, {r7}, {r7}, {r6}, {}, {0x0, r8}, {r7}], 0x1, "2156816c73038c"}) r9 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r9, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:34:25 executing program 1: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050918000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) [ 486.537926][T32400] loop2: detected capacity change from 0 to 264192 [ 486.538350][T32399] loop4: detected capacity change from 0 to 264192 14:34:25 executing program 1: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005091c000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) 14:34:25 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)={0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0xbc, 0x2, 0x5, 0x20, 0x0, 0x9, 0x2009, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x0, 0x7ff}, 0x6000, 0x4, 0x7, 0x9, 0x9, 0x3, 0x7, 0x0, 0x1, 0x0, 0x4}, r2, 0x2, r0, 0x2) 14:34:25 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r2, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:34:25 executing program 1: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050926000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) 14:34:25 executing program 5: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3a) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x9, 0x5) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x0) 14:34:25 executing program 2: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r5, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r8}, {}, {r7}, {r7}, {r7}, {}, {}, {0x0, r8}, {}, {0x0, r2}, {}, {}, {r6, r8}, {0x0, r8}, {}, {r7, r8}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {}, {0x0, r8}, {}, {}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {r7}, {}, {0x0, r8}, {r7, r8}, {0x0, r8}, {r6}, {}, {0x0, r8}, {r7}, {}, {}, {r7}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {}, {r6}, {}, {r7}, {r6}, {}, {r7, r8}, {}, {}, {0x0, r8}, {}, {}, {r7}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {r7}, {}, {0x0, r8}, {r6}, {r7, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7, r8}, {r6, r8}, {r7}, {}, {r6}, {r6}, {}, {}, {r6}, {}, {}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {r6, r8}, {0x0, r8}, {}, {r6, r8}, {}, {}, {}, {r7}, {}, {}, {}, {r6}, {}, {r7}, {}, {}, {r7}, {0x0, r8}, {}, {}, {}, {}, {0x0, r8}, {}, {r6}, {}, {}, {}, {0x0, r8}, {r6, r8}, {r7}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {r6}, {r7}, {0x0, r8}, {}, {}, {r6}, {0x0, r8}, {r7}, {r6, r8}, {0x0, r8}, {}, {0x0, r8}, {}, {}, {0x0, r8}, {r7}, {}, {}, {r6}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {r6}, {r7}, {r7, r8}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {r7}, {0x0, r8}, {}, {r7}, {r7}, {0x0, r3}, {}, {}, {}, {}, {0x0, r8}, {r6}, {}, {}, {0x0, r8}, {}, {r7, r8}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {}, {}, {r6, r8}, {}, {}, {r7}, {r6}, {0x0, r8}, {}, {0x0, r8}, {r7}, {r7}, {r6}, {}, {0x0, r8}, {r7}], 0x1, "2156816c73038c"}) r9 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r9, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 486.932720][T32434] loop2: detected capacity change from 0 to 264192 [ 486.961088][T32440] loop3: detected capacity change from 0 to 264192 [ 486.986387][T32440] FAT-fs (loop3): bogus number of reserved sectors [ 486.992938][T32440] FAT-fs (loop3): Can't find a valid FAT filesystem 14:34:26 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc050216c, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 14:34:26 executing program 1: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="04000509fe000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) 14:34:26 executing program 5: perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) read$char_usb(r1, 0x0, 0x0) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000080)=0x1, 0x4) 14:34:26 executing program 2: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r5, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r8}, {}, {r7}, {r7}, {r7}, {}, {}, {0x0, r8}, {}, {0x0, r2}, {}, {}, {r6, r8}, {0x0, r8}, {}, {r7, r8}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {}, {0x0, r8}, {}, {}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {r7}, {}, {0x0, r8}, {r7, r8}, {0x0, r8}, {r6}, {}, {0x0, r8}, {r7}, {}, {}, {r7}, {}, {}, {0x0, r8}, {}, {0x0, r8}, {}, {r6}, {}, {r7}, {r6}, {}, {r7, r8}, {}, {}, {0x0, r8}, {}, {}, {r7}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {r7}, {}, {0x0, r8}, {r6}, {r7, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7, r8}, {r6, r8}, {r7}, {}, {r6}, {r6}, {}, {}, {r6}, {}, {}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {r6, r8}, {0x0, r8}, {}, {r6, r8}, {}, {}, {}, {r7}, {}, {}, {}, {r6}, {}, {r7}, {}, {}, {r7}, {0x0, r8}, {}, {}, {}, {}, {0x0, r8}, {}, {r6}, {}, {}, {}, {0x0, r8}, {r6, r8}, {r7}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {r6}, {r7}, {0x0, r8}, {}, {}, {r6}, {0x0, r8}, {r7}, {r6, r8}, {0x0, r8}, {}, {0x0, r8}, {}, {}, {0x0, r8}, {r7}, {}, {}, {r6}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {r6}, {r7}, {r7, r8}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {r7}, {0x0, r8}, {}, {r7}, {r7}, {0x0, r3}, {}, {}, {}, {}, {0x0, r8}, {r6}, {}, {}, {0x0, r8}, {}, {r7, r8}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {}, {}, {r6, r8}, {}, {}, {r7}, {r6}, {0x0, r8}, {}, {0x0, r8}, {r7}, {r7}, {r6}, {}, {0x0, r8}, {r7}], 0x1, "2156816c73038c"}) r9 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r9, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:34:26 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x8, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{0x0, r6}, {}, {r5}, {r5}, {r5}, {}, {}, {0x0, r6}, {}, {0x0, r1}, {}, {}, {r4, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {r5}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r4}, {}, {0x0, r6}, {r5}, {}, {}, {r5}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {r5, r6}, {}, {r2, r6}, {0x0, r6}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {r4}, {}, {}, {}, {r4, r6}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {r5}, {}, {0x0, r6}, {r4}, {r5, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {r4, r6}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {}, {}, {r5}, {}, {}, {0x0, r6}, {r4}, {}, {r5}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {r5}, {}, {}, {}, {r4}, {r4}, {}, {r4}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {}, {}, {r4}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r4}, {r5}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {r5}, {r5}, {0x0, r3}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {r4}, {}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {r4, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {r5}, {r4}, {}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {}, {r4, r6}], 0x1, "2156816c73038c"}) r7 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:34:26 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) read$char_usb(r2, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r2) read$char_usb(r1, 0x0, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000080)={0xe, 0x17, 0x2, {0x5, './bus'}}, 0xe) ftruncate(r0, 0x0) [ 487.443141][T32463] loop2: detected capacity change from 0 to 264192 14:34:26 executing program 1: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050904020000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) [ 487.514859][ C0] scsi_io_completion_action: 4 callbacks suppressed [ 487.514882][ C0] sd 0:0:1:0: tag#467 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 487.531311][ C0] sd 0:0:1:0: tag#467 CDB: opcode=0xe5 (vendor) [ 487.537579][ C0] sd 0:0:1:0: tag#467 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 487.546545][ C0] sd 0:0:1:0: tag#467 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 487.555673][ C0] sd 0:0:1:0: tag#467 CDB[20]: ba 14:34:26 executing program 1: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900030000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) [ 487.570773][T32479] loop4: detected capacity change from 0 to 264192 14:34:26 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{0x0}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r2, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:34:26 executing program 1: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050902040000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) 14:34:26 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x508400, 0x0) read$char_usb(r0, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/class/scsi_disk', 0xb167fe46fb6f7f19, 0x44) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = creat(&(0x7f0000000900)='./bus\x00', 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x64, 0x8, 0x4000000000000) read$char_usb(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000006c0)={0x0, 0x80, 0x3, 0x2, 0x1, 0x1, 0x0, 0x80000001, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x1, @perf_bp={&(0x7f0000000400), 0x5}, 0x200, 0x2, 0x7, 0x0, 0x48, 0xad, 0x1000, 0x0, 0x1, 0x0, 0x9}, 0x0, 0x2, 0xffffffffffffffff, 0x2) read$char_usb(r4, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x5, 0x4010, r4, 0x40e45000) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) read$char_usb(r5, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x2, 0x80, 0xf7, 0x84, 0x0, 0x2ed3, 0x1000, 0xe, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080)}, 0x10, 0x442, 0x33a, 0x7, 0x4, 0x8001, 0xfffd, 0x0, 0x1, 0x0, 0x3ff}, 0x0, 0x0, r5, 0x8) preadv(r5, &(0x7f0000000840)=[{&(0x7f0000000240)=""/168, 0xa8}, {&(0x7f0000000300)=""/80, 0x50}, {&(0x7f0000000380)=""/2, 0x2}, {&(0x7f00000003c0)=""/18, 0x12}, {&(0x7f0000000480)=""/101, 0x65}, {&(0x7f0000000500)=""/43, 0x2b}, {&(0x7f0000000540)=""/221, 0xdd}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000640)=""/105, 0x69}], 0x9, 0x7ff, 0xbdb1) dup2(r2, r3) ftruncate(r2, 0x0) ftruncate(r1, 0x86) 14:34:26 executing program 2: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r5, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r8}, {}, {r7}, {r7}, {r7}, {}, {}, {0x0, r8}, {}, {0x0, r2}, {}, {}, {r6, r8}, {0x0, r8}, {}, {r7, r8}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {}, {0x0, r8}, {}, {}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {r7}, {}, {0x0, r8}, {r7, r8}, {0x0, r8}, {r6}, {}, {0x0, r8}, {r7}, {}, {}, {r7}, {}, {}, {0x0, r8}, {}, {0x0, r8}, {}, {r6}, {}, {r7}, {r6}, {}, {r7, r8}, {}, {}, {0x0, r8}, {}, {}, {r7}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {r7}, {}, {0x0, r8}, {r6}, {r7, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7, r8}, {r6, r8}, {r7}, {}, {r6}, {r6}, {}, {}, {r6}, {}, {}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {r6, r8}, {0x0, r8}, {}, {r6, r8}, {}, {}, {}, {r7}, {}, {}, {}, {r6}, {}, {r7}, {}, {}, {r7}, {0x0, r8}, {}, {}, {}, {}, {0x0, r8}, {}, {r6}, {}, {}, {}, {0x0, r8}, {r6, r8}, {r7}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {r6}, {r7}, {0x0, r8}, {}, {}, {r6}, {0x0, r8}, {r7}, {r6, r8}, {0x0, r8}, {}, {0x0, r8}, {}, {}, {0x0, r8}, {r7}, {}, {}, {r6}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {r6}, {r7}, {r7, r8}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {r7}, {0x0, r8}, {}, {r7}, {r7}, {0x0, r3}, {}, {}, {}, {}, {0x0, r8}, {r6}, {}, {}, {0x0, r8}, {}, {r7, r8}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {}, {}, {r6, r8}, {}, {}, {r7}, {r6}, {0x0, r8}, {}, {0x0, r8}, {r7}, {r7}, {r6}, {}, {0x0, r8}, {r7}], 0x1, "2156816c73038c"}) r9 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r9, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 487.863903][T32505] loop3: detected capacity change from 0 to 264192 [ 487.872471][T32505] FAT-fs (loop3): bogus number of reserved sectors [ 487.879037][T32505] FAT-fs (loop3): Can't find a valid FAT filesystem [ 487.912660][ C1] sd 0:0:1:0: tag#468 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 487.922441][ C1] sd 0:0:1:0: tag#468 CDB: opcode=0xe5 (vendor) [ 487.928722][ C1] sd 0:0:1:0: tag#468 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 487.937729][ C1] sd 0:0:1:0: tag#468 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 487.946692][ C1] sd 0:0:1:0: tag#468 CDB[20]: ba [ 487.958930][T32516] loop2: detected capacity change from 0 to 264192 [ 487.994796][ C0] sd 0:0:1:0: tag#469 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 488.004695][ C0] sd 0:0:1:0: tag#469 CDB: opcode=0xe5 (vendor) [ 488.011385][ C0] sd 0:0:1:0: tag#469 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 488.021241][ C0] sd 0:0:1:0: tag#469 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 488.030210][ C0] sd 0:0:1:0: tag#469 CDB[20]: ba [ 488.280371][ T22] kauditd_printk_skb: 7 callbacks suppressed [ 488.280428][ T22] audit: type=1326 audit(1631457266.881:95909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=32462 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x0 14:34:26 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502174, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 14:34:26 executing program 1: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050906040000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) 14:34:26 executing program 5: sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="00020000", @ANYRES16=0x0, @ANYBLOB="000325bd7000fddbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20040000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) read$char_usb(r2, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRES16=r1, @ANYRESHEX=r2], 0x24}, 0x1, 0x0, 0x0, 0x80005}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x1c, 0x0, 0xd47e45b05c51b8ec, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20048844) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r4, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x20010, r4, 0x748ec000) 14:34:26 executing program 2: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r5, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r8}, {}, {r7}, {r7}, {r7}, {}, {}, {0x0, r8}, {}, {0x0, r2}, {}, {}, {r6, r8}, {0x0, r8}, {}, {r7, r8}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {}, {0x0, r8}, {}, {}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {r7}, {}, {0x0, r8}, {r7, r8}, {0x0, r8}, {r6}, {}, {0x0, r8}, {r7}, {}, {}, {r7}, {}, {}, {0x0, r8}, {}, {0x0, r8}, {}, {r6}, {}, {r7}, {r6}, {}, {r7, r8}, {}, {}, {0x0, r8}, {}, {}, {r7}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {r7}, {}, {0x0, r8}, {r6}, {r7, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7, r8}, {r6, r8}, {r7}, {}, {r6}, {r6}, {}, {}, {r6}, {}, {}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {r6, r8}, {0x0, r8}, {}, {r6, r8}, {}, {}, {}, {r7}, {}, {}, {}, {r6}, {}, {r7}, {}, {}, {r7}, {0x0, r8}, {}, {}, {}, {}, {0x0, r8}, {}, {r6}, {}, {}, {}, {0x0, r8}, {r6, r8}, {r7}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {r6}, {r7}, {0x0, r8}, {}, {}, {r6}, {0x0, r8}, {r7}, {r6, r8}, {0x0, r8}, {}, {0x0, r8}, {}, {}, {0x0, r8}, {r7}, {}, {}, {r6}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {r6}, {r7}, {r7, r8}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {r7}, {0x0, r8}, {}, {r7}, {r7}, {0x0, r3}, {}, {}, {}, {}, {0x0, r8}, {r6}, {}, {}, {0x0, r8}, {}, {r7, r8}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {}, {}, {r6, r8}, {}, {}, {r7}, {r6}, {0x0, r8}, {}, {0x0, r8}, {r7}, {r7}, {r6}, {}, {0x0, r8}, {r7}], 0x1, "2156816c73038c"}) r9 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r9, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:34:26 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x8, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{0x0, r6}, {}, {r5}, {r5}, {r5}, {}, {}, {0x0, r6}, {}, {0x0, r1}, {}, {}, {r4, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {r5}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r4}, {}, {0x0, r6}, {r5}, {}, {}, {r5}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {r5, r6}, {}, {r2, r6}, {0x0, r6}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {r4}, {}, {}, {}, {r4, r6}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {r5}, {}, {0x0, r6}, {r4}, {r5, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {r4, r6}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {}, {}, {r5}, {}, {}, {0x0, r6}, {r4}, {}, {r5}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {r5}, {}, {}, {}, {r4}, {r4}, {}, {r4}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {}, {}, {r4}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r4}, {r5}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {r5}, {r5}, {0x0, r3}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {r4}, {}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {r4, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {r5}, {r4}, {}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {}, {r4, r6}], 0x1, "2156816c73038c"}) r7 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:34:27 executing program 1: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050980040000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) [ 488.388902][ T22] audit: type=1326 audit(1631457266.991:95910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=32535 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x0 [ 488.393947][T32536] loop2: detected capacity change from 0 to 264192 14:34:27 executing program 1: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900050000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) [ 488.482926][T32553] loop4: detected capacity change from 0 to 264192 14:34:27 executing program 1: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050929050000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) [ 488.524683][ C1] sd 0:0:1:0: tag#470 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 488.534563][ C1] sd 0:0:1:0: tag#470 CDB: opcode=0xe5 (vendor) [ 488.540835][ C1] sd 0:0:1:0: tag#470 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 488.549803][ C1] sd 0:0:1:0: tag#470 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 488.558782][ C1] sd 0:0:1:0: tag#470 CDB[20]: ba 14:34:27 executing program 1: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900060000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) 14:34:27 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{0x0}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r2, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:34:27 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0xce, 0xe6, 0x7, 0x81, 0x0, 0xd38, 0x100, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3235, 0x2, @perf_bp={&(0x7f00000000c0)}, 0x2, 0x800, 0x400, 0x0, 0x1, 0x5, 0x4, 0x0, 0x20, 0x0, 0x80000000}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x8) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x8f, 0x0, 0x2}) 14:34:27 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x8, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{0x0, r6}, {}, {r5}, {r5}, {r5}, {}, {}, {0x0, r6}, {}, {0x0, r1}, {}, {}, {r4, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {r5}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r4}, {}, {0x0, r6}, {r5}, {}, {}, {r5}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {r5, r6}, {}, {r2, r6}, {0x0, r6}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {r4}, {}, {}, {}, {r4, r6}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {r5}, {}, {0x0, r6}, {r4}, {r5, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {r4, r6}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {}, {}, {r5}, {}, {}, {0x0, r6}, {r4}, {}, {r5}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {r5}, {}, {}, {}, {r4}, {r4}, {}, {r4}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {}, {}, {r4}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r4}, {r5}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {r5}, {r5}, {0x0, r3}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {r4}, {}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {r4, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {r5}, {r4}, {}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {}, {r4, r6}], 0x1, "2156816c73038c"}) r7 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) [ 488.821631][T32587] loop3: detected capacity change from 0 to 264192 [ 488.836639][T32587] FAT-fs (loop3): bogus number of reserved sectors [ 488.843289][T32587] FAT-fs (loop3): Can't find a valid FAT filesystem [ 488.861270][ C1] sd 0:0:1:0: tag#471 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 488.871086][ C1] sd 0:0:1:0: tag#471 CDB: opcode=0xe5 (vendor) [ 488.877351][ C1] sd 0:0:1:0: tag#471 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 488.886312][ C1] sd 0:0:1:0: tag#471 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 488.890324][T32596] loop4: detected capacity change from 0 to 264192 [ 488.895287][ C1] sd 0:0:1:0: tag#471 CDB[20]: ba [ 489.222213][ T22] audit: type=1326 audit(1631457267.821:95911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=32535 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x0 14:34:27 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc050217a, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 14:34:27 executing program 1: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050904060000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) 14:34:27 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x0) 14:34:27 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x8, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{0x0, r6}, {}, {r5}, {r5}, {r5}, {}, {}, {0x0, r6}, {}, {0x0, r1}, {}, {}, {r4, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {r5}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r4}, {}, {0x0, r6}, {r5}, {}, {}, {r5}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {r5, r6}, {}, {r2, r6}, {0x0, r6}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4}, {}, {}, {}, {r4, r6}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {r5}, {}, {0x0, r6}, {r4}, {r5, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {r4, r6}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {}, {}, {r5}, {}, {}, {0x0, r6}, {r4}, {}, {r5}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {r5}, {}, {}, {}, {r4}, {r4}, {}, {r4}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {}, {}, {r4}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r4}, {r5}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {r5}, {r5}, {0x0, r3}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {r4}, {}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {r4, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {r5}, {r4}, {}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {}, {r4, r6}], 0x1, "2156816c73038c"}) r7 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:34:27 executing program 2: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r5, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r8}, {}, {r7}, {r7}, {r7}, {}, {}, {0x0, r8}, {}, {0x0, r2}, {}, {}, {r6, r8}, {0x0, r8}, {}, {r7, r8}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {}, {0x0, r8}, {}, {}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {r7}, {}, {0x0, r8}, {r7, r8}, {0x0, r8}, {r6}, {}, {0x0, r8}, {r7}, {}, {}, {}, {0x0, r8}, {}, {0x0, r8}, {}, {0x0, r8}, {}, {r6}, {}, {r7}, {r6}, {}, {r7, r8}, {}, {}, {0x0, r8}, {}, {}, {r7}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {r7}, {}, {0x0, r8}, {r6}, {r7, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7, r8}, {r6, r8}, {r7}, {}, {r6}, {r6}, {}, {}, {r6}, {}, {}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {r6, r8}, {0x0, r8}, {}, {r6, r8}, {}, {}, {}, {r7}, {}, {}, {}, {r6}, {}, {r7}, {}, {}, {r7}, {0x0, r8}, {}, {}, {}, {}, {0x0, r8}, {}, {r6}, {}, {}, {}, {0x0, r8}, {r6, r8}, {r7}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {r6}, {r7}, {0x0, r8}, {}, {}, {r6}, {0x0, r8}, {r7}, {r6, r8}, {0x0, r8}, {}, {0x0, r8}, {}, {}, {0x0, r8}, {r7}, {}, {}, {r6}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {r6}, {r7}, {r7, r8}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {r7}, {0x0, r8}, {}, {r7}, {r7}, {0x0, r3}, {}, {}, {}, {}, {0x0, r8}, {r6}, {}, {}, {0x0, r8}, {}, {r7, r8}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {}, {}, {r6, r8}, {}, {}, {r7}, {r6}, {0x0, r8}, {}, {0x0, r8}, {r7}, {r7}, {r6}, {}, {0x0, r8}, {r7}], 0x1, "2156816c73038c"}) r9 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r9, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:34:27 executing program 1: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900070000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) [ 489.322418][T32617] loop4: detected capacity change from 0 to 264192 [ 489.329442][ T22] audit: type=1326 audit(1631457267.931:95912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=32615 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x0 [ 489.360706][T32625] loop2: detected capacity change from 0 to 264192 14:34:28 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) read$char_usb(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5, 0xa7, 0x9, 0x0, 0x0, 0xd4, 0x2, 0x10, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x3, 0xa1c9}, 0x4201, 0x6, 0x80000000, 0x6, 0x0, 0xfffffffa, 0x2bfb, 0x0, 0x6, 0x0, 0x99c}, 0xffffffffffffffff, 0xe, r0, 0x1) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x0) 14:34:28 executing program 1: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="04000509000a0000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) [ 489.445568][ C0] sd 0:0:1:0: tag#472 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 489.455355][ C0] sd 0:0:1:0: tag#472 CDB: opcode=0xe5 (vendor) [ 489.461776][ C0] sd 0:0:1:0: tag#472 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 489.470755][ C0] sd 0:0:1:0: tag#472 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 489.479714][ C0] sd 0:0:1:0: tag#472 CDB[20]: ba 14:34:28 executing program 5: perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x0) 14:34:28 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{0x0}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r2, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:34:28 executing program 1: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="04000509000b0000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) 14:34:28 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000180)) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = syz_io_uring_setup(0xeda, &(0x7f0000000140), &(0x7f000061b000/0x2000)=nil, &(0x7f0000715000/0x3000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) tkill(0x0, 0x3a) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, 0x0, 0x9, 0x5) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) read$char_usb(r6, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xa2, 0x1, 0x8, 0x0, 0x0, 0x9, 0x200, 0x6, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x200, 0x10000}, 0xc5b66dc8960108a9, 0x8, 0x0, 0x4, 0x0, 0xfffffb50, 0x3, 0x0, 0xf25, 0x0, 0x4}, 0x0, 0x4, r6, 0x1) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2000, @fd=r3}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000001680)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x1) r7 = mmap$IORING_OFF_SQES(&(0x7f0000001000/0x2000)=nil, 0x2000, 0xa, 0x40010, r2, 0x10000000) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r7, &(0x7f00000000c0)=@IORING_OP_WRITEV={0x2, 0x5, 0x0, @fd_index, 0x5, &(0x7f0000000080)=[{&(0x7f0000000480)="83d84e8fb776a1504e6699fd23437b624f56c9507c69c73ce7c730911f6699f75d31fb580ccd2334b6e6ae12d1a535552862508dc1cfd886ad3b3a54f6a0e4a667c1ddf45c00f6d34d1b9e840852d82096e54efaca57625617b79baee07c211503f87c21ca549340fe3412462fa39edaa90e3675a1128f44c292f4a8c9df2814c1b6086b59991d42ccb361d22ead8aab1a869724b6f14e3ca3e69fa6d1b12bcd7e1192197045219da868ba61cdeeea9abb53f5a7103d832fd143dbce3b0790c8d0d3ca96c536c3e43d818b51582614d09eeaa0b4ca88faf2232592e44a511c00448628d0e5b924830d60f5bd952ee00d1c511e802297", 0xf6}, {&(0x7f0000000580)="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", 0x1000}], 0x2, 0x2, 0x0, {0x0, r8}}, 0xa93b) read$char_usb(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r1) [ 489.785070][T32666] loop3: detected capacity change from 0 to 264192 [ 489.831431][T32666] FAT-fs (loop3): bogus number of reserved sectors [ 489.837991][T32666] FAT-fs (loop3): Can't find a valid FAT filesystem [ 489.849478][ C1] sd 0:0:1:0: tag#473 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 489.859234][ C1] sd 0:0:1:0: tag#473 CDB: opcode=0xe5 (vendor) [ 489.865496][ C1] sd 0:0:1:0: tag#473 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 489.874449][ C1] sd 0:0:1:0: tag#473 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 489.883412][ C1] sd 0:0:1:0: tag#473 CDB[20]: ba [ 490.155894][ T22] audit: type=1326 audit(1631457268.761:95913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=32615 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x0 14:34:28 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502200, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 14:34:28 executing program 1: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050908100000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) 14:34:28 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x3fa, 0x2, 0x70bd28, 0x25dfdbfb, {0x1, 0x1}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8080}, 0x10) r1 = syz_io_uring_complete(0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) fallocate(r1, 0x37, 0x1ff, 0x9) read$char_usb(r2, 0x0, 0x0) dup3(r1, r2, 0x0) 14:34:28 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x8, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{0x0, r6}, {}, {r5}, {r5}, {r5}, {}, {}, {0x0, r6}, {}, {0x0, r1}, {}, {}, {r4, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {r5}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r4}, {}, {0x0, r6}, {r5}, {}, {}, {r5}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {r5, r6}, {}, {r2, r6}, {0x0, r6}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4}, {}, {}, {}, {r4, r6}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {r5}, {}, {0x0, r6}, {r4}, {r5, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {r4, r6}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {}, {}, {r5}, {}, {}, {0x0, r6}, {r4}, {}, {r5}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {r5}, {}, {}, {}, {r4}, {r4}, {}, {r4}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {}, {}, {r4}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r4}, {r5}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {r5}, {r5}, {0x0, r3}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {r4}, {}, {}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {r4}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {r4, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {r5}, {r4}, {}, {r5, r6}, {r5}, {0x0, r6}, {}, {}, {}, {r4, r6}], 0x1, "2156816c73038c"}) r7 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:34:28 executing program 2: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r5, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r8}, {}, {r7}, {r7}, {r7}, {}, {}, {0x0, r8}, {}, {0x0, r2}, {}, {}, {r6, r8}, {0x0, r8}, {}, {r7, r8}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {}, {0x0, r8}, {}, {}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {r7}, {}, {0x0, r8}, {r7, r8}, {0x0, r8}, {r6}, {}, {0x0, r8}, {r7}, {}, {}, {}, {0x0, r8}, {}, {0x0, r8}, {}, {0x0, r8}, {}, {r6}, {}, {r7}, {r6}, {}, {r7, r8}, {}, {}, {0x0, r8}, {}, {}, {r7}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {r7}, {}, {0x0, r8}, {r6}, {r7, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7, r8}, {r6, r8}, {r7}, {}, {r6}, {r6}, {}, {}, {r6}, {}, {}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {r6, r8}, {0x0, r8}, {}, {r6, r8}, {}, {}, {}, {r7}, {}, {}, {}, {r6}, {}, {r7}, {}, {}, {r7}, {0x0, r8}, {}, {}, {}, {}, {0x0, r8}, {}, {r6}, {}, {}, {}, {0x0, r8}, {r6, r8}, {r7}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {r6}, {r7}, {0x0, r8}, {}, {}, {r6}, {0x0, r8}, {r7}, {r6, r8}, {0x0, r8}, {}, {0x0, r8}, {}, {}, {0x0, r8}, {r7}, {}, {}, {r6}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {r6}, {r7}, {r7, r8}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {r7}, {0x0, r8}, {}, {r7}, {r7}, {0x0, r3}, {}, {}, {}, {}, {0x0, r8}, {r6}, {}, {}, {0x0, r8}, {}, {r7, r8}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {}, {}, {r6, r8}, {}, {}, {r7}, {r6}, {0x0, r8}, {}, {0x0, r8}, {r7}, {r7}, {r6}, {}, {0x0, r8}, {r7}], 0x1, "2156816c73038c"}) r9 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r9, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:34:28 executing program 1: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900180000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) [ 490.243989][ T22] audit: type=1326 audit(1631457268.851:95914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=32688 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x0 [ 490.247351][T32690] loop4: detected capacity change from 0 to 264192 [ 490.274872][T32692] loop2: detected capacity change from 0 to 264192 14:34:28 executing program 1: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="04000509001c0000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) 14:34:28 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x1000) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x0) [ 490.315155][ C1] sd 0:0:1:0: tag#474 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 490.325015][ C1] sd 0:0:1:0: tag#474 CDB: opcode=0xe5 (vendor) [ 490.331527][ C1] sd 0:0:1:0: tag#474 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 490.340578][ C1] sd 0:0:1:0: tag#474 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 490.349544][ C1] sd 0:0:1:0: tag#474 CDB[20]: ba 14:34:29 executing program 1: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900200000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) 14:34:29 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r2, 0x9472a000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x4c102, 0x0) 14:34:29 executing program 1: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900260000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) 14:34:29 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)=0x0) r2 = fsmount(r0, 0x1, 0x4) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x7f, 0x7, 0x81, 0x18, 0x0, 0xfff, 0x4000, 0xf, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8000, 0x4, @perf_bp={&(0x7f00000000c0), 0x8}, 0x800, 0x0, 0x4, 0x4, 0x0, 0x9792, 0x7, 0x0, 0x7, 0x0, 0xfffffffffffffe01}, r1, 0xd, r2, 0x2) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) read$char_usb(r3, 0x0, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x30, r3, 0x1a273000) [ 490.691611][T32736] loop3: detected capacity change from 0 to 264192 [ 490.714450][T32736] FAT-fs (loop3): bogus number of reserved sectors [ 490.720986][T32736] FAT-fs (loop3): Can't find a valid FAT filesystem [ 490.739008][ C1] sd 0:0:1:0: tag#504 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 490.748790][ C1] sd 0:0:1:0: tag#504 CDB: opcode=0xe5 (vendor) [ 490.755168][ C1] sd 0:0:1:0: tag#504 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 490.764136][ C1] sd 0:0:1:0: tag#504 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 490.773103][ C1] sd 0:0:1:0: tag#504 CDB[20]: ba [ 491.077763][ T22] audit: type=1326 audit(1631457269.681:95915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=32688 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x0 14:34:29 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0504000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 14:34:29 executing program 1: set_mempolicy(0x4001, &(0x7f0000000140)=0x7, 0x40) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050905290000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) 14:34:29 executing program 2: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000300)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0x8f4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "0d4abfd4b32220"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f43