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"}], 0x1288}}, {{&(0x7f0000001bc0)=@caif, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001c40)="ac7b26d3c5b57fc62cfb84be96eef2e09bee96ff1aea114dba9df33c8b311970a4726845bd7655c388f1a64cf56e62c8be880c3efd2ee8e736b37a754bf6db3b526082592d9782b9d333bfb8a123fd28ad1d2db97dced47f40d8d0d5aef70b66aacdd06c5367d41d34e2ff2b0ae5fbc134b774186715ef8b76a2b7851abdf779461e46608b81c15e4e4c8bf5ff9cd726b0c501569ca950cd00779a6e6daff9efdaad87b85d0bd92d16ba306371e0cc3d2ee0d04d15310adadf2e75e7901dd5fc878df814139cd9c1142699cbe4", 0xcd}, {&(0x7f0000001d40)="a5a3c1d064a4ca6e6b47ab453306614d7e252c46593d05cd3be525da3b2169299214ae18d0d68d570b94ce8500a63720d835dbf53d8e7b6de9f84087fad01d667f89ea974b447b171f7aaa7c1302ac31bf093621e53cb05e6eed9370ddba61ad7f3f0b50de0840a8091406c458b0075a9334dd2f785081a7ee399c4d3ad6552cebf0228c9060a19bfc9b7ae452c2811491fcf176b813b26c2f9dfb7884f4c1dd2c0dc52f6e3bf8b7bb9b", 0xaa}, {&(0x7f0000001e00)="ca56b22098d35e33a3e2ab5cd805b2d8dbd8f5cd6b434f845f530678f4895cf6e6c602ea544211bb3f24db232080eff4af896b8f09139a9b2b0ce600f448be99712f57de698f4f34f434c06a36be386cd0178c53b90179ba85057fc3b06bf0a652027c4655eeee8391df4fe906091f6366461fc8e9e969107f232202", 0x7c}], 0x3}}, {{&(0x7f0000001ec0)=@un=@abs={0x1, 0x0, 0x4e24}, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000001f40)="91a65df0decd2f0019564e5ae6efba3b824d02f6bc88680e6d", 0x19}, {&(0x7f00000005c0)="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", 0x1b1}], 0x2, &(0x7f0000002000)=ANY=[@ANYBLOB="800000000000000006000000c90b00000a23d987aa9e646650955383a5c4fe81a862e839b0de92143a2dd6d08d1c8a185ed64d51a8b3172a554fc571e60619273a37ac2a7ff30f731f180dbfdf90bf65b4f4f52ee6ff15333960756702704940c8002052a49533630f5382f7642380ab6222bcd8f6634a5eab9a198d00000000c8000000000000000d0100003f0000004147ac8a97d45edfc7837576cf5c5621cc4fa24675e9ac3adc32db3a7e1aaa3215764248408a67ded10b084d1eee8d2debe8f2e1ccd91bfa15540767e43ea0622c95f7d169a25c334deb953a59597e6b4e93b235b716b0693beaaae98122e1be8acf278f943776cf1f465be1823ccd64d0efe59832b7b2f009e946217d4abc238b93aa0e2cbc27464741fd6d137f7562273948e1481228cf5a9d93b6410b4ce3a55ce5318ce66c0795af2640eab83926491800000000000010010000000000000301000000000080e003d187a215c3b41bffec0108a16f118ec6d292fdef02c96c7a23a8dd4241ff8fe4a3fa2804db0d429d1dfa4753fce2b2b59b46cedc8468d494b4cf5817c9eee99eed6e825c4755ab9c5152806307835967cabcb0810047726a2658c8e62adfea3e7281d0ac2f24f175abae72899ca5c5763c754ad2148f44741e367be1e6ed62ad66d158dfab8044aebae6bae7b71a837b6249f2453a560af9a19f78475438fdc3b5da39b2e10488f856855787b4bedea71c92da0cefdc477573289abd439e1fe5f218a66c2c8c36cd183ad38f4bf95782fcf4c267964e94f59effa8dcce03b35ac47767ec9e07fd4c6f6d816cf2641990504f70e5de778c2b00000000000038000000000000000a010000070000001f6b3778a850decc008816df5f1d66f75439951dc5ef43901f0cc96b1df09033fe0712db37171800e8000000000000000d010000fbffffff66c346f27bb00e8181d2b33fd1255f2db3d1ba7d48ccf9ae678e60d0a50676bc93f37f2b9061c5a07b154338f889226575f676596a3b8c02469f47ecaebbc298ad5077950ade1181dc1e9c2a9abd20adf4d1683ad86894267b007a5d294b24242d51ebd02d3499fc2f64a41b50c029b9c9afcdd955f7c04496f67f72ac611515e5bc3e071201b76cfdf6061f328470ac17f82a6564005685a5357febbf0e13bcc033f31a0c000100000000000059280f522c88ed4e1d6af76f81396a7174e1a3d749f17e6f502c0c3c1af4adc7c71e8f2b00000000000000"], 0x378}}, {{&(0x7f0000002380)=@can, 0x80, &(0x7f0000002700)=[{&(0x7f0000002400)="29547e99259b9bef8c1bc0ee8bda8e3d9c7b928ad96eb9", 0x17}, {&(0x7f0000002440)="124d6602b80358a5a6927923656ab48abcc60e1a15a911808d0431aab4d65799dd22d34e959eb128d85ae17b28cf152643e43157471b3970aff36c2d990235b20adb16cbf578", 0x46}, {&(0x7f00000024c0)="709902477dce01d683eae7d6c09da6efed959051320d648ed338716899a415c9651d0931805e14659f67ababa76b79d9ed3c23ae97a08088cb6fd8004229003c1af3311edeea248035f1f47c0e453ad731e9b5848a5311c36c43947c57853c5c6c489bdfe13d7208e3e5bc17edbe3c04e2ad00c7a05419a9be2c0a179f62665c25298dc664bf2f6c45ef45aa27c2a760414803c7d8e0ca1bc2103fa2d30e6c73afcc3702771ec15be02f06f5b243b58a4cb25f6e2a3b857342ea7f9cf5d4ea0f8728d91796c14afa6c11dd6aa5a260a2f302e7a5d15d19a34c165e8bfa87890db8f1", 0xe2}, {&(0x7f00000025c0)="ec", 0x1}, {&(0x7f0000002600)="b7fb6e00d629d02839ae7cb1e5f485604b29ac80b056369e36fc4ca5cba1cffb6b49c9fd8b004df9892010755562840a2c8c63a82761ede269459fd3b3e017cea55dd0964d76cf46aee903dfe8ed7435446e22673b5ff9047d9de84e13b6c3c1c4f8fa65b7207695842fbe20248a6b6de3adb615bc", 0x75}, {&(0x7f0000002680)="3bc8c7066771aeee0700b52a4c56a59645b02f055d3eed650c31e13c1b0f28d510e19ac4cfb8bec40eed34d0681233357b214d0afab6aedff1515ac00c7fe5675349ba34d6d7d13af494b04eeb0796d814cd8d871d5340469f3e1ab27377a9a5596afc6d507e50356744a7ac47", 0x6d}], 0x6, &(0x7f0000002780)=[{0x98, 0x117, 0x1, "bf0e7ceb5220635314b10e780d5014dd7d1b26c1e21b20ab82213ee73943c5fd12975554c3f6c4d49d09cca6e2103bda6648fb43e10f0df0ef92ecdeee35fe244c22a33293c71dee8bc5001229932541357529b4661e8d1d1cf66d9103eb1c3bfc82be25d1b1c2d6b818052bd2a68c8b895bd8eb52663116a01e001e91d98cba711f7b9990"}, {0x68, 0x119, 0x4, "ba6e54bcab8247fd8dfbd56bf545e7606f9a5a3f15bcc29f76318d1ac2dd5511b7d84db6f4fc64f8be793b4458842d9d0e2f5dd0a52c276799ff382e7beba0d36e609ffae4b0cf1dd8d40e469a4415ce71eb368b47"}, {0x48, 0x7fc11bdec01111c1, 0x8, "2603b72cd8ee775a56a5200b5087f93c7d407fe30a12a4279c8a9caa033e728873a988ac81b5dc2c9a232a2bf57c293b1d90b6b18c8799"}, {0x78, 0x10c, 0x8, "4abbb0564de0a1755532ffd98f40e9cd90d7cf3b330bcb09e82587b1dce64aff1369c9ee83462595aec2c0e9dea35f3ff1b03bbcfe366d57c68a1f08f3c307bae78a3bd3ab8f4e0a5f3e889e0d8b8c1dcf390c3ab10f8a89627dbc6cbfd01afd2356b7fd1fc9931a"}], 0x1c0}}], 0x5, 0x8015) bind(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @dev}, 0x0, 0x0, 0x0, 0x1}}, 0x80) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='veth1_virt_wifi\x00', 0x10) r4 = creat(&(0x7f0000000000)='./bus\x00', 0xc2) fcntl$setstatus(r4, 0x4, 0x6000) setsockopt$inet_int(r4, 0x0, 0x15, &(0x7f0000000080), 0x4) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r5, 0x0) setsockopt$inet_int(r5, 0x0, 0xd, &(0x7f0000000200)=0x9, 0x4) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) socket(0x40000000002, 0x3, 0x2) (async) socket(0x40000000002, 0x3, 0x80000000002) (async) accept4(r0, &(0x7f0000000000)=@caif=@dbg, &(0x7f00000000c0)=0x80, 0x800) (async) creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) fcntl$setstatus(r1, 0x4, 0xe0400) (async) io_setup(0x202, &(0x7f0000000200)) (async) ftruncate(r3, 0x81fd) (async) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1299}) (async) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r3}]) (async) sendmmsg(r2, &(0x7f0000002940)=[{{&(0x7f0000000340)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e20, @rand_addr=0x64010102}, 0x4004, 0x4, 0x3}}, 0x80, &(0x7f0000000540)=[{&(0x7f00000003c0)="355d2566353d6ecd54435313188c896a59fedd540865c3c4f79af6863dccb91905f1cc57c234c3c9e2bd7e6f38745881b0d76ad4e312a0d09d55cceab6d8e7f03db559952c6c8b2f72566789524c83d0e4b713ece26d04e40afdaed2bff686dd3ed046f3b45a604a801bf29ee13a", 0x6e}, {&(0x7f0000000440)="dc38cd566d6926b4ce77d660359ff628f4e1b97def79c3ffcfb3d2dd0bb4d7486532fbe81c75a777cd7a7b0a50d761a3033f617289aa90b76c3e005c3559f589217d761317eaec3a75c1f737189775c2b37a6f795de0a5d5d976bd232a50fb305004302979cd7f113583ebd9a363d7d1816c8fdd0ca3a438", 0x78}, {&(0x7f0000000100)="8619af32e3297d46fa0d00a9daa258f78a2afc282da3dd63a8dcb1ec22892d99e9c5bc17b141e232346fc976d6dd1de1297c6a", 0x33}, {&(0x7f0000000280)="e25b322614337bcedb8edfcfc59452e41020f0eb7b162683954b45f5a6a0ab05a6c10f4568ccece2df9dd800d21be5f14186", 0x32}, {&(0x7f00000004c0)="20a9776e1feb060f8333b4c5215156bdedfa21e5e49da5576f0b73b52d5257c8b1d25e2033bbded7b3501d8c7b5070b5bd5827c8d5a81c571e7e9165d89845efa5b1eecbb1f0b162e4cedcaa2a67f75d2a21b2d2613b63577fb571e2d84da1f018238ab0a8a171a4e4c1a3ae9c9bc4bc", 0x70}], 0x5, &(0x7f0000002a80)=ANY=[@ANYBLOB="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"], 0x1b0}}, {{&(0x7f0000000780)=@phonet={0x23, 0x1, 0x6, 0x66}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000800)="847f29560e1fa8ecdd02dc94c08c52e37228a231b1d7ae1478133c615ee8ed416ba54640b540026a873cb288042825731f0f4d5495e3d6d4c45ba5cfd517b5e4cf6f45a40d30ce6cd12f48a6d87150d094ab49510530fe58f64a6ec1c61e0d5b50f4d5083a4c74c075bec24398045c6298551d6243f687615686a57fd2a6ad8f0b0e40135344853ac0af222d067a63dc18c5b83b1bfc2712", 0x98}], 0x1, &(0x7f0000000900)=[{0x108, 0x10a, 0x2, "7eb3aa9a3b19b4202fc6dcef293db223dd75d9af78ea7e460eb920f239c62dcd397ad1d37a9293c4414e514fc90570e57f5536f4fa4c55c74588b0c2c9bad79fcad3ffdcb3dd775bdcce4aa8f22c5159c3dae56a6f78ebf7d4b3496a98daa33f8e80281862eff050f420db22343abacc968a1ed930f7b1a93675adee96059028db7ceba575822ba90d608717b39a0dc3e62f10c7a02559f87a363bbe8f17c55fed499aa13920893d4420ca55144b82f1c7e7bc15ea21f969dc13b3dd727811de2abd977f3126c164c2940c01e6a46f49958e49a612e00bcb3323999407f9bfb1b91373e67be34e15cb6e0e527b66abbf6fbff7"}, {0x30, 0x117, 0x847a, "9ba9cf453af21c65c1c700a63d67766484bdaf86ac543bdaaac3dbd3dbce61ec"}, {0x78, 0x111, 0x7, "7c36b06087a002cdc9dfce3a9565f6bc8ad4721fbfaa3537121335ec5803c203727e198aeeada052ab81eff175d7df6dec8d06771fab696ec4a0e80a047159bddb708d33e88ffc1ee023018521401ee4c983b676b8d1fb01376abb1cf3f13378b92c9d0cfc"}, {0x30, 0x11, 0x1000, "152932b1aabffbd010db972e01da0a0d20b061209c7a1e28e585c38a"}, {0x10, 0x116, 0x400}, {0x58, 0x32e, 0x7fff, "275ab04c001686599ae434f0a643a8e15c8ea2878ed8ce8c4ab966cab03d7d982073db8ddb9026de133f1ee80afd6300ae5d640a7891f43e06011029c012bcd5af77b3eb25fa7c71"}, {0x30, 0x116, 0x5, "c4e94e44927efc306c27767373bc4904a50ddbc37ceb0cd5b5f9420f8243"}, {0x1010, 0x3a, 0x2, "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"}], 0x1288}}, {{&(0x7f0000001bc0)=@caif, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001c40)="ac7b26d3c5b57fc62cfb84be96eef2e09bee96ff1aea114dba9df33c8b311970a4726845bd7655c388f1a64cf56e62c8be880c3efd2ee8e736b37a754bf6db3b526082592d9782b9d333bfb8a123fd28ad1d2db97dced47f40d8d0d5aef70b66aacdd06c5367d41d34e2ff2b0ae5fbc134b774186715ef8b76a2b7851abdf779461e46608b81c15e4e4c8bf5ff9cd726b0c501569ca950cd00779a6e6daff9efdaad87b85d0bd92d16ba306371e0cc3d2ee0d04d15310adadf2e75e7901dd5fc878df814139cd9c1142699cbe4", 0xcd}, {&(0x7f0000001d40)="a5a3c1d064a4ca6e6b47ab453306614d7e252c46593d05cd3be525da3b2169299214ae18d0d68d570b94ce8500a63720d835dbf53d8e7b6de9f84087fad01d667f89ea974b447b171f7aaa7c1302ac31bf093621e53cb05e6eed9370ddba61ad7f3f0b50de0840a8091406c458b0075a9334dd2f785081a7ee399c4d3ad6552cebf0228c9060a19bfc9b7ae452c2811491fcf176b813b26c2f9dfb7884f4c1dd2c0dc52f6e3bf8b7bb9b", 0xaa}, {&(0x7f0000001e00)="ca56b22098d35e33a3e2ab5cd805b2d8dbd8f5cd6b434f845f530678f4895cf6e6c602ea544211bb3f24db232080eff4af896b8f09139a9b2b0ce600f448be99712f57de698f4f34f434c06a36be386cd0178c53b90179ba85057fc3b06bf0a652027c4655eeee8391df4fe906091f6366461fc8e9e969107f232202", 0x7c}], 0x3}}, {{&(0x7f0000001ec0)=@un=@abs={0x1, 0x0, 0x4e24}, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000001f40)="91a65df0decd2f0019564e5ae6efba3b824d02f6bc88680e6d", 0x19}, {&(0x7f00000005c0)="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", 0x1b1}], 0x2, &(0x7f0000002000)=ANY=[@ANYBLOB="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"], 0x378}}, {{&(0x7f0000002380)=@can, 0x80, &(0x7f0000002700)=[{&(0x7f0000002400)="29547e99259b9bef8c1bc0ee8bda8e3d9c7b928ad96eb9", 0x17}, {&(0x7f0000002440)="124d6602b80358a5a6927923656ab48abcc60e1a15a911808d0431aab4d65799dd22d34e959eb128d85ae17b28cf152643e43157471b3970aff36c2d990235b20adb16cbf578", 0x46}, {&(0x7f00000024c0)="709902477dce01d683eae7d6c09da6efed959051320d648ed338716899a415c9651d0931805e14659f67ababa76b79d9ed3c23ae97a08088cb6fd8004229003c1af3311edeea248035f1f47c0e453ad731e9b5848a5311c36c43947c57853c5c6c489bdfe13d7208e3e5bc17edbe3c04e2ad00c7a05419a9be2c0a179f62665c25298dc664bf2f6c45ef45aa27c2a760414803c7d8e0ca1bc2103fa2d30e6c73afcc3702771ec15be02f06f5b243b58a4cb25f6e2a3b857342ea7f9cf5d4ea0f8728d91796c14afa6c11dd6aa5a260a2f302e7a5d15d19a34c165e8bfa87890db8f1", 0xe2}, {&(0x7f00000025c0)="ec", 0x1}, {&(0x7f0000002600)="b7fb6e00d629d02839ae7cb1e5f485604b29ac80b056369e36fc4ca5cba1cffb6b49c9fd8b004df9892010755562840a2c8c63a82761ede269459fd3b3e017cea55dd0964d76cf46aee903dfe8ed7435446e22673b5ff9047d9de84e13b6c3c1c4f8fa65b7207695842fbe20248a6b6de3adb615bc", 0x75}, {&(0x7f0000002680)="3bc8c7066771aeee0700b52a4c56a59645b02f055d3eed650c31e13c1b0f28d510e19ac4cfb8bec40eed34d0681233357b214d0afab6aedff1515ac00c7fe5675349ba34d6d7d13af494b04eeb0796d814cd8d871d5340469f3e1ab27377a9a5596afc6d507e50356744a7ac47", 0x6d}], 0x6, &(0x7f0000002780)=[{0x98, 0x117, 0x1, "bf0e7ceb5220635314b10e780d5014dd7d1b26c1e21b20ab82213ee73943c5fd12975554c3f6c4d49d09cca6e2103bda6648fb43e10f0df0ef92ecdeee35fe244c22a33293c71dee8bc5001229932541357529b4661e8d1d1cf66d9103eb1c3bfc82be25d1b1c2d6b818052bd2a68c8b895bd8eb52663116a01e001e91d98cba711f7b9990"}, {0x68, 0x119, 0x4, "ba6e54bcab8247fd8dfbd56bf545e7606f9a5a3f15bcc29f76318d1ac2dd5511b7d84db6f4fc64f8be793b4458842d9d0e2f5dd0a52c276799ff382e7beba0d36e609ffae4b0cf1dd8d40e469a4415ce71eb368b47"}, {0x48, 0x7fc11bdec01111c1, 0x8, "2603b72cd8ee775a56a5200b5087f93c7d407fe30a12a4279c8a9caa033e728873a988ac81b5dc2c9a232a2bf57c293b1d90b6b18c8799"}, {0x78, 0x10c, 0x8, "4abbb0564de0a1755532ffd98f40e9cd90d7cf3b330bcb09e82587b1dce64aff1369c9ee83462595aec2c0e9dea35f3ff1b03bbcfe366d57c68a1f08f3c307bae78a3bd3ab8f4e0a5f3e889e0d8b8c1dcf390c3ab10f8a89627dbc6cbfd01afd2356b7fd1fc9931a"}], 0x1c0}}], 0x5, 0x8015) (async) bind(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @dev}, 0x0, 0x0, 0x0, 0x1}}, 0x80) (async) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='veth1_virt_wifi\x00', 0x10) (async) creat(&(0x7f0000000000)='./bus\x00', 0xc2) (async) fcntl$setstatus(r4, 0x4, 0x6000) (async) setsockopt$inet_int(r4, 0x0, 0x15, &(0x7f0000000080), 0x4) (async) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) (async) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) (async) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r5, 0x0) (async) setsockopt$inet_int(r5, 0x0, 0xd, &(0x7f0000000200)=0x9, 0x4) (async) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) (async) [ 86.000343][ T3596] loop5: detected capacity change from 0 to 264192 [ 86.036050][ T3599] loop3: detected capacity change from 0 to 264192 04:30:52 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x18000, 0xd0) r1 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000001240)=[{&(0x7f0000000200)="390000001300090468fe0700000000000000ff3f04000000480100100000000004012b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000080)={r0, 0x3f, 0x69, 0x4}) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, 0x1, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_NAT={0xc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_MASK={0xc, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT={0x1c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000044}, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000000)="3900000013001108680907070000000f0000ff3f04000000170a001700000000040037000a00030001342564aa75b9a64411f6bbf44dc48f57", 0x39}], 0x1) [ 86.049368][ T3619] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 86.058754][ T3619] netlink: 'syz-executor.2': attribute type 15 has an invalid length. [ 86.108437][ T3640] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.4'. [ 86.122513][ T3640] device gretap0 entered promiscuous mode 04:30:52 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000300)=@updsa={0x1a8, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, r2}, {@in6=@mcast2, 0x0, 0x33}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {}, {}, {0x0, 0x0, 0x100000}, 0x0, 0x0, 0x2}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2b}}, @etimer_thresh={0x8, 0xc, 0x40000}, @algo_auth_trunc={0x91, 0x14, {{'nhpoly1305-avx2\x00'}, 0x228, 0x0, "de0db6343e60f154e02040d0bf6a510990021ffca597bd6c6d5509193d0cc37176b1dc5fbadb564dfc3e8b4adc63593a547251288facd309afa7e1a53601004cfe76000000"}}]}, 0x1a8}}, 0x0) 04:30:52 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) (async) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) (async) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000300)=@updsa={0x1a8, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, r2}, {@in6=@mcast2, 0x0, 0x33}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {}, {}, {0x0, 0x0, 0x100000}, 0x0, 0x0, 0x2}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2b}}, @etimer_thresh={0x8, 0xc, 0x40000}, @algo_auth_trunc={0x91, 0x14, {{'nhpoly1305-avx2\x00'}, 0x228, 0x0, "de0db6343e60f154e02040d0bf6a510990021ffca597bd6c6d5509193d0cc37176b1dc5fbadb564dfc3e8b4adc63593a547251288facd309afa7e1a53601004cfe76000000"}}]}, 0x1a8}}, 0x0) [ 86.167549][ T3643] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.4'. 04:30:52 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x50, 0x3}, 0xd00}, @generic={0x5, "c9f82881cf2383c34673609a3c75"}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xf0f4, 0x0, 0x0, 0x0, 0x8005, &(0x7f0000000240)='veth1_to_team\x00', 0x1, 0x7000000}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r7, @ANYRESHEX=r6, @ANYRESOCT=r5, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r6, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r8}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:30:52 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64) r1 = socket$unix(0x1, 0x2, 0x0) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) (async) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) (async, rerun: 64) sendmsg$nl_xfrm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000300)=@updsa={0x1a8, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, r2}, {@in6=@mcast2, 0x0, 0x33}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {}, {}, {0x0, 0x0, 0x100000}, 0x0, 0x0, 0x2}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2b}}, @etimer_thresh={0x8, 0xc, 0x40000}, @algo_auth_trunc={0x91, 0x14, {{'nhpoly1305-avx2\x00'}, 0x228, 0x0, "de0db6343e60f154e02040d0bf6a510990021ffca597bd6c6d5509193d0cc37176b1dc5fbadb564dfc3e8b4adc63593a547251288facd309afa7e1a53601004cfe76000000"}}]}, 0x1a8}}, 0x0) (rerun: 64) [ 86.222911][ T3643] 0u: renamed from gretap0 [ 86.255119][ T3643] device 40u left promiscuous mode 04:30:52 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x50, 0x3}, 0xd00}, @generic={0x5, "c9f82881cf2383c34673609a3c75"}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xf0f4, 0x0, 0x0, 0x0, 0x8005, &(0x7f0000000240)='veth1_to_team\x00', 0x1, 0x7000000}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r7, @ANYRESHEX=r6, @ANYRESOCT=r5, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r6, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r8}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:30:52 executing program 1: renameat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000012c0)={&(0x7f0000001040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x2}]}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x2}]}]}}, &(0x7f00000011c0)=""/248, 0x46, 0xf8, 0x1}, 0x20) [ 86.276811][ T3643] A link change request failed with some changes committed already. Interface 40u may have been left with an inconsistent configuration, please check. [ 86.279408][ T3659] loop0: detected capacity change from 0 to 264192 04:30:52 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x50, 0x3}, 0xd00}, @generic={0x5, "c9f82881cf2383c34673609a3c75"}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xf0f4, 0x0, 0x0, 0x0, 0x8005, &(0x7f0000000240)='veth1_to_team\x00', 0x1, 0x7000000}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r7, @ANYRESHEX=r6, @ANYRESOCT=r5, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r6, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r8}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:30:52 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x18000, 0xd0) (async) r1 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000001240)=[{&(0x7f0000000200)="390000001300090468fe0700000000000000ff3f04000000480100100000000004012b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000080)={r0, 0x3f, 0x69, 0x4}) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, 0x1, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_NAT={0xc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_MASK={0xc, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT={0x1c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000044}, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000000)="3900000013001108680907070000000f0000ff3f04000000170a001700000000040037000a00030001342564aa75b9a64411f6bbf44dc48f57", 0x39}], 0x1) [ 86.331436][ T3661] loop5: detected capacity change from 0 to 264192 [ 86.332276][ T1921] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 86.339000][ T3640] syz-executor.4 (3640) used greatest stack depth: 10704 bytes left [ 86.347255][ T1921] Buffer I/O error on dev loop5, logical block 0, async page read [ 86.411746][ T3665] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.4'. [ 86.422285][ T3665] device 40u entered promiscuous mode [ 86.425834][ T3669] loop3: detected capacity change from 0 to 264192 [ 86.441809][ T3665] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.4'. [ 86.451334][ T3665] 1u: renamed from 40u [ 86.456692][ T3665] device 41u left promiscuous mode [ 86.471492][ T3665] A link change request failed with some changes committed already. Interface 41u may have been left with an inconsistent configuration, please check. [ 86.512621][ T3665] syz-executor.4 (3665) used greatest stack depth: 10696 bytes left 04:30:52 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x1182ecdbcdbcf16a, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0x2}]}}}]}, 0x3c}}, 0x0) (async, rerun: 64) r2 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="73797a749ab3fc33da1bab6100000000", @ANYRES32=0x0, @ANYBLOB="07000040000000020000000546190018006600003d299078e0000002ac1414bb00000000"]}) (async) close(r2) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000018000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0) (async) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) (async) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) write$binfmt_misc(r4, &(0x7f0000000340)={'syz1', "2b8c29b63367e91ae722b51a9ecb74355b961ee13f611b58c9c80551f989cb8150aa818bd26e0353356bd190d24cc7e5de2ae652a86c2122e6f310aa1cbe47dc4a960d4605b05ca2a3c83a9425b691dd6e5fd4e180fa60b841feb64ef9defab60e606c03d757b1a1c9ea8d75f5363d66dffd391b278c1a54d64fb57db1ae2e13749deffd7f47536b795185181ecbd669b5e1dd7f42f263aae4b9fc489c66636f35bd01c8c2128e6ad3fc80be562cfd916e3f0f72c0d0ee933ef7bf223a274f31c0a82f0bb00f63012152bda3824c6aeefdf17e2a39"}, 0xd9) (async, rerun: 32) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x28}}}, 0x400, 0x7}, &(0x7f0000000280)=0x90) (rerun: 32) 04:30:52 executing program 1: renameat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000012c0)={&(0x7f0000001040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x2}]}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x2}]}]}}, &(0x7f00000011c0)=""/248, 0x46, 0xf8, 0x1}, 0x20) 04:30:52 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x50, 0x3}, 0xd00}, @generic={0x5, "c9f82881cf2383c34673609a3c75"}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xf0f4, 0x0, 0x0, 0x0, 0x8005, &(0x7f0000000240)='veth1_to_team\x00', 0x1, 0x7000000}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r6, @ANYRESHEX=r5, @ANYRESOCT=r4, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:30:52 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x50, 0x3}, 0xd00}, @generic={0x5, "c9f82881cf2383c34673609a3c75"}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xf0f4, 0x0, 0x0, 0x0, 0x8005, &(0x7f0000000240)='veth1_to_team\x00', 0x1, 0x7000000}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r7, @ANYRESHEX=r6, @ANYRESOCT=r5, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r6, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r8}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:30:52 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x50, 0x3}, 0xd00}, @generic={0x5, "c9f82881cf2383c34673609a3c75"}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xf0f4, 0x0, 0x0, 0x0, 0x8005, &(0x7f0000000240)='veth1_to_team\x00', 0x1, 0x7000000}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r7, @ANYRESHEX=r6, @ANYRESOCT=r5, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r6, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r8}) 04:30:52 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x18000, 0xd0) r1 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000001240)=[{&(0x7f0000000200)="390000001300090468fe0700000000000000ff3f04000000480100100000000004012b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) (async) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000080)={r0, 0x3f, 0x69, 0x4}) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, 0x1, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_NAT={0xc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_MASK={0xc, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT={0x1c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000044}, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000000)="3900000013001108680907070000000f0000ff3f04000000170a001700000000040037000a00030001342564aa75b9a64411f6bbf44dc48f57", 0x39}], 0x1) 04:30:52 executing program 1: renameat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000012c0)={&(0x7f0000001040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x2}]}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x2}]}]}}, &(0x7f00000011c0)=""/248, 0x46, 0xf8, 0x1}, 0x20) renameat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000012c0)={&(0x7f0000001040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x2}]}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x2}]}]}}, &(0x7f00000011c0)=""/248, 0x46, 0xf8, 0x1}, 0x20) (async) 04:30:52 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x1182ecdbcdbcf16a, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0x2}]}}}]}, 0x3c}}, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) (async) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="73797a749ab3fc33da1bab6100000000", @ANYRES32=0x0, @ANYBLOB="07000040000000020000000546190018006600003d299078e0000002ac1414bb00000000"]}) close(r2) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000018000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0) (async) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) write$binfmt_misc(r4, &(0x7f0000000340)={'syz1', "2b8c29b63367e91ae722b51a9ecb74355b961ee13f611b58c9c80551f989cb8150aa818bd26e0353356bd190d24cc7e5de2ae652a86c2122e6f310aa1cbe47dc4a960d4605b05ca2a3c83a9425b691dd6e5fd4e180fa60b841feb64ef9defab60e606c03d757b1a1c9ea8d75f5363d66dffd391b278c1a54d64fb57db1ae2e13749deffd7f47536b795185181ecbd669b5e1dd7f42f263aae4b9fc489c66636f35bd01c8c2128e6ad3fc80be562cfd916e3f0f72c0d0ee933ef7bf223a274f31c0a82f0bb00f63012152bda3824c6aeefdf17e2a39"}, 0xd9) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x28}}}, 0x400, 0x7}, &(0x7f0000000280)=0x90) [ 86.840987][ T3674] loop5: detected capacity change from 0 to 264192 [ 86.849827][ T3680] loop0: detected capacity change from 0 to 264192 [ 86.851044][ T3677] loop3: detected capacity change from 0 to 264192 [ 86.872710][ T3682] device 41u entered promiscuous mode 04:30:53 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x1182ecdbcdbcf16a, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0x2}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="73797a749ab3fc33da1bab6100000000", @ANYRES32=0x0, @ANYBLOB="07000040000000020000000546190018006600003d299078e0000002ac1414bb00000000"]}) close(r2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000018000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) write$binfmt_misc(r4, &(0x7f0000000340)={'syz1', "2b8c29b63367e91ae722b51a9ecb74355b961ee13f611b58c9c80551f989cb8150aa818bd26e0353356bd190d24cc7e5de2ae652a86c2122e6f310aa1cbe47dc4a960d4605b05ca2a3c83a9425b691dd6e5fd4e180fa60b841feb64ef9defab60e606c03d757b1a1c9ea8d75f5363d66dffd391b278c1a54d64fb57db1ae2e13749deffd7f47536b795185181ecbd669b5e1dd7f42f263aae4b9fc489c66636f35bd01c8c2128e6ad3fc80be562cfd916e3f0f72c0d0ee933ef7bf223a274f31c0a82f0bb00f63012152bda3824c6aeefdf17e2a39"}, 0xd9) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x28}}}, 0x400, 0x7}, &(0x7f0000000280)=0x90) 04:30:53 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x4, 0x80, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) write$binfmt_aout(r1, &(0x7f0000001280)=ANY=[@ANYRES64=r0, @ANYRESDEC=0x0], 0xffffffffffffffa9) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=@udp}, 0x20) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000001300)={'sit0\x00', &(0x7f00000012c0)={@mcast1, @private=0xa010100, 0x1d, 0x7}}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)="e8", &(0x7f00000001c0)=""/4096}, 0x20) pread64(0xffffffffffffffff, &(0x7f00000011c0)=""/176, 0xb0, 0x5) sendfile(r2, r4, 0x0, 0x200fc0) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0xf, 0x8, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r5, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r5, &(0x7f0000000000)="e8", &(0x7f00000001c0)=""/4096}, 0x20) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000006, 0x10010, r5, 0x34680000) [ 86.925445][ T3683] 0u: renamed from 41u [ 86.944725][ T3683] device 40u left promiscuous mode 04:30:53 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x4, 0x80, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) write$binfmt_aout(r1, &(0x7f0000001280)=ANY=[@ANYRES64=r0, @ANYRESDEC=0x0], 0xffffffffffffffa9) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=@udp}, 0x20) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000001300)={'sit0\x00', &(0x7f00000012c0)={@mcast1, @private=0xa010100, 0x1d, 0x7}}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)="e8", &(0x7f00000001c0)=""/4096}, 0x20) pread64(0xffffffffffffffff, &(0x7f00000011c0)=""/176, 0xb0, 0x5) sendfile(r2, r4, 0x0, 0x200fc0) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0xf, 0x8, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r5, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r5, &(0x7f0000000000)="e8", &(0x7f00000001c0)=""/4096}, 0x20) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000006, 0x10010, r5, 0x34680000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (async) creat(&(0x7f0000000040)='./bus\x00', 0x0) (async) lseek(r1, 0x800002, 0x0) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x4, 0x80, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) (async) write$binfmt_aout(r1, &(0x7f0000001280)=ANY=[@ANYRES64=r0, @ANYRESDEC=0x0], 0xffffffffffffffa9) (async) socket$inet6(0xa, 0x400000000001, 0x0) (async) close(r2) (async) socket(0x1e, 0x4, 0x0) (async) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10) (async) open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=@udp}, 0x20) (async) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000001300)={'sit0\x00', &(0x7f00000012c0)={@mcast1, @private=0xa010100, 0x1d, 0x7}}) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)="e8", &(0x7f00000001c0)=""/4096}, 0x20) (async) pread64(0xffffffffffffffff, &(0x7f00000011c0)=""/176, 0xb0, 0x5) (async) sendfile(r2, r4, 0x0, 0x200fc0) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0xf, 0x8, 0x1}, 0x48) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r5, &(0x7f0000000000), 0x0}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r5, &(0x7f0000000000)="e8", &(0x7f00000001c0)=""/4096}, 0x20) (async) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000006, 0x10010, r5, 0x34680000) (async) [ 86.978854][ T3683] A link change request failed with some changes committed already. Interface 40u may have been left with an inconsistent configuration, please check. [ 87.000361][ T24] audit: type=1400 audit(1659328253.087:190): avc: denied { connect } for pid=3701 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 04:30:53 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x4, 0x80, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) write$binfmt_aout(r1, &(0x7f0000001280)=ANY=[@ANYRES64=r0, @ANYRESDEC=0x0], 0xffffffffffffffa9) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=@udp}, 0x20) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000001300)={'sit0\x00', &(0x7f00000012c0)={@mcast1, @private=0xa010100, 0x1d, 0x7}}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)="e8", &(0x7f00000001c0)=""/4096}, 0x20) pread64(0xffffffffffffffff, &(0x7f00000011c0)=""/176, 0xb0, 0x5) sendfile(r2, r4, 0x0, 0x200fc0) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0xf, 0x8, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r5, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r5, &(0x7f0000000000)="e8", &(0x7f00000001c0)=""/4096}, 0x20) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000006, 0x10010, r5, 0x34680000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (async) creat(&(0x7f0000000040)='./bus\x00', 0x0) (async) lseek(r1, 0x800002, 0x0) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x4, 0x80, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) (async) write$binfmt_aout(r1, &(0x7f0000001280)=ANY=[@ANYRES64=r0, @ANYRESDEC=0x0], 0xffffffffffffffa9) (async) socket$inet6(0xa, 0x400000000001, 0x0) (async) close(r2) (async) socket(0x1e, 0x4, 0x0) (async) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10) (async) open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=@udp}, 0x20) (async) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000001300)={'sit0\x00', &(0x7f00000012c0)={@mcast1, @private=0xa010100, 0x1d, 0x7}}) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)="e8", &(0x7f00000001c0)=""/4096}, 0x20) (async) pread64(0xffffffffffffffff, &(0x7f00000011c0)=""/176, 0xb0, 0x5) (async) sendfile(r2, r4, 0x0, 0x200fc0) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0xf, 0x8, 0x1}, 0x48) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r5, &(0x7f0000000000), 0x0}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r5, &(0x7f0000000000)="e8", &(0x7f00000001c0)=""/4096}, 0x20) (async) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000006, 0x10010, r5, 0x34680000) (async) [ 87.046622][ T3704] netlink: 'syz-executor.2': attribute type 15 has an invalid length. [ 87.066974][ T24] audit: type=1400 audit(1659328253.107:191): avc: denied { write } for pid=3701 comm="syz-executor.1" path="socket:[20241]" dev="sockfs" ino=20241 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 04:30:53 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {r1, r2+60000000}}, &(0x7f0000000440)) futex(&(0x7f0000000280)=0x1, 0x6, 0x0, 0x0, 0x0, 0x1a0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) clock_gettime(0x0, 0x0) timer_settime(r3, 0x1, &(0x7f0000000140)={{0x0, 0x989680}}, &(0x7f00000001c0)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001840)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) futex(&(0x7f0000000240)=0x2, 0x0, 0x2, 0x0, 0x0, 0x1) sendmsg$key(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x2, 0x9, 0x6, 0x0, 0xd, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_sa={0x2, 0x1, 0x4d2, 0xff, 0x12, 0x4e, 0x4, 0x60000000}, @sadb_x_nat_t_type={0x1}, @sadb_address={0x3, 0x7108e18d91691861, 0x2b, 0x80, 0x0, @in={0x2, 0x4e24, @empty}}, @sadb_x_filter={0x5, 0x1a, @in=@empty, @in6=@local, 0x5, 0x14}]}, 0x68}}, 0x8010) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) futex(0x0, 0x4, 0x0, 0x0, 0x0, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 04:30:53 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x50, 0x3}, 0xd00}, @generic={0x5, "c9f82881cf2383c34673609a3c75"}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xf0f4, 0x0, 0x0, 0x0, 0x8005, &(0x7f0000000240)='veth1_to_team\x00', 0x1, 0x7000000}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r6, @ANYRESHEX=r5, @ANYRESOCT=r4, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:30:53 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x50, 0x3}, 0xd00}, @generic={0x5, "c9f82881cf2383c34673609a3c75"}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xf0f4, 0x0, 0x0, 0x0, 0x8005, &(0x7f0000000240)='veth1_to_team\x00', 0x1, 0x7000000}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r7, @ANYRESHEX=r6, @ANYRESOCT=r5, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r6, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r8}) [ 87.182928][ T3750] loop3: detected capacity change from 0 to 264192 [ 87.196382][ T3752] loop0: detected capacity change from 0 to 264192 04:30:53 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x50, 0x3}, 0xd00}, @generic={0x5, "c9f82881cf2383c34673609a3c75"}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xf0f4, 0x0, 0x0, 0x0, 0x8005, &(0x7f0000000240)='veth1_to_team\x00', 0x1, 0x7000000}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r7, @ANYRESHEX=r6, @ANYRESOCT=r5, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r6, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r8}) 04:30:53 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x50, 0x3}, 0xd00}, @generic={0x5, "c9f82881cf2383c34673609a3c75"}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xf0f4, 0x0, 0x0, 0x0, 0x8005, &(0x7f0000000240)='veth1_to_team\x00', 0x1, 0x7000000}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r6, @ANYRESHEX=r5, @ANYRESOCT=r4, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 87.288367][ T3755] loop5: detected capacity change from 0 to 264192 04:30:53 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x50, 0x3}, 0xd00}, @generic={0x5, "c9f82881cf2383c34673609a3c75"}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xf0f4, 0x0, 0x0, 0x0, 0x8005, &(0x7f0000000240)='veth1_to_team\x00', 0x1, 0x7000000}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r7, @ANYRESHEX=r6, @ANYRESOCT=r5, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r6, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r8}) [ 87.385345][ T3759] loop3: detected capacity change from 0 to 264192 [ 87.456055][ T3762] loop0: detected capacity change from 0 to 264192 04:30:53 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x50, 0x3}, 0xd00}, @generic={0x5, "c9f82881cf2383c34673609a3c75"}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xf0f4, 0x0, 0x0, 0x0, 0x8005, &(0x7f0000000240)='veth1_to_team\x00', 0x1, 0x7000000}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r7, @ANYRESHEX=r6, @ANYRESOCT=r5, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r6, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r8}) 04:30:53 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x50, 0x3}, 0xd00}, @generic={0x5, "c9f82881cf2383c34673609a3c75"}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xf0f4, 0x0, 0x0, 0x0, 0x8005, &(0x7f0000000240)='veth1_to_team\x00', 0x1, 0x7000000}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000001640)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 87.571447][ T3766] loop5: detected capacity change from 0 to 264192 [ 87.623144][ T3768] loop3: detected capacity change from 0 to 264192 04:30:53 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x50, 0x3}, 0xd00}, @generic={0x5, "c9f82881cf2383c34673609a3c75"}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xf0f4, 0x0, 0x0, 0x0, 0x8005, &(0x7f0000000240)='veth1_to_team\x00', 0x1, 0x7000000}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000001640)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:30:53 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x50, 0x3}, 0xd00}, @generic={0x5, "c9f82881cf2383c34673609a3c75"}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xf0f4, 0x0, 0x0, 0x0, 0x8005, &(0x7f0000000240)='veth1_to_team\x00', 0x1, 0x7000000}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r6, @ANYRESHEX=r5, @ANYRESOCT=r4, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:30:53 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x50, 0x3}, 0xd00}, @generic={0x5, "c9f82881cf2383c34673609a3c75"}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xf0f4, 0x0, 0x0, 0x0, 0x8005, &(0x7f0000000240)='veth1_to_team\x00', 0x1, 0x7000000}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:30:53 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x50, 0x3}, 0xd00}, @generic={0x5, "c9f82881cf2383c34673609a3c75"}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xf0f4, 0x0, 0x0, 0x0, 0x8005, &(0x7f0000000240)='veth1_to_team\x00', 0x1, 0x7000000}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r6, @ANYRESHEX=r5, @ANYRESOCT=r4, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) [ 87.822612][ T3772] loop0: detected capacity change from 0 to 264192 [ 87.835772][ T3774] loop2: detected capacity change from 0 to 264192 [ 87.841039][ T3776] loop3: detected capacity change from 0 to 264192 [ 87.866218][ T3778] loop5: detected capacity change from 0 to 264192 04:30:56 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {r1, r2+60000000}}, &(0x7f0000000440)) futex(&(0x7f0000000280)=0x1, 0x6, 0x0, 0x0, 0x0, 0x1a0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) clock_gettime(0x0, 0x0) timer_settime(r3, 0x1, &(0x7f0000000140)={{0x0, 0x989680}}, &(0x7f00000001c0)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001840)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) futex(&(0x7f0000000240)=0x2, 0x0, 0x2, 0x0, 0x0, 0x1) sendmsg$key(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x2, 0x9, 0x6, 0x0, 0xd, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_sa={0x2, 0x1, 0x4d2, 0xff, 0x12, 0x4e, 0x4, 0x60000000}, @sadb_x_nat_t_type={0x1}, @sadb_address={0x3, 0x7108e18d91691861, 0x2b, 0x80, 0x0, @in={0x2, 0x4e24, @empty}}, @sadb_x_filter={0x5, 0x1a, @in=@empty, @in6=@local, 0x5, 0x14}]}, 0x68}}, 0x8010) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) futex(0x0, 0x4, 0x0, 0x0, 0x0, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) (async) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) (async) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async) clock_gettime(0x0, &(0x7f00000003c0)) (async) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {r1, r2+60000000}}, &(0x7f0000000440)) (async) futex(&(0x7f0000000280)=0x1, 0x6, 0x0, 0x0, 0x0, 0x1a0) (async) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) (async) clock_gettime(0x0, 0x0) (async) timer_settime(r3, 0x1, &(0x7f0000000140)={{0x0, 0x989680}}, &(0x7f00000001c0)) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001840)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) (async) futex(&(0x7f0000000240)=0x2, 0x0, 0x2, 0x0, 0x0, 0x1) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x2, 0x9, 0x6, 0x0, 0xd, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_sa={0x2, 0x1, 0x4d2, 0xff, 0x12, 0x4e, 0x4, 0x60000000}, @sadb_x_nat_t_type={0x1}, @sadb_address={0x3, 0x7108e18d91691861, 0x2b, 0x80, 0x0, @in={0x2, 0x4e24, @empty}}, @sadb_x_filter={0x5, 0x1a, @in=@empty, @in6=@local, 0x5, 0x14}]}, 0x68}}, 0x8010) (async) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) (async) futex(0x0, 0x4, 0x0, 0x0, 0x0, 0x1) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) (async) 04:30:56 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:30:56 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x50, 0x3}, 0xd00}, @generic={0x5, "c9f82881cf2383c34673609a3c75"}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xf0f4, 0x0, 0x0, 0x0, 0x8005, &(0x7f0000000240)='veth1_to_team\x00', 0x1, 0x7000000}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r6, @ANYRESHEX=r5, @ANYRESOCT=r4, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) 04:30:56 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x50, 0x3}, 0xd00}, @generic={0x5, "c9f82881cf2383c34673609a3c75"}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xf0f4, 0x0, 0x0, 0x0, 0x8005, &(0x7f0000000240)='veth1_to_team\x00', 0x1, 0x7000000}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000001640)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:30:56 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x50, 0x3}, 0xd00}, @generic={0x5, "c9f82881cf2383c34673609a3c75"}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xf0f4, 0x0, 0x0, 0x0, 0x8005, &(0x7f0000000240)='veth1_to_team\x00', 0x1, 0x7000000}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r6, @ANYRESHEX=r5, @ANYRESOCT=r4, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:30:56 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x12) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000001840)=ANY=[@ANYRES32, @ANYRES32, @ANYRESOCT, @ANYRES32, @ANYRES32, @ANYRES64, @ANYRESHEX], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x40025) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f000004a9c0)={{0x0, 0x800, 0x6, 0xffffffffffff0000, 0xb0, 0x9bd, 0x80000001, 0x5, 0x5, 0x81, 0x9, 0x80000000, 0x1fe000000, 0xb5, 0x9}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004b9c0)={0x0}) r4 = creat(&(0x7f0000000140)='./file0\x00', 0x8) fallocate(r4, 0x0, 0x0, 0x2000402) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000001440)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f00000008c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') sendmsg$NLBL_CIPSOV4_C_REMOVE(r9, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000001840)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYRESOCT, @ANYRES32=r6, @ANYRES32, @ANYRES64, @ANYRESHEX], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x40025) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004bbc0)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {r3, r6}], 0x13, "2f0e08ab2666a8"}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="c7"], 0x4) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) [ 90.175527][ T3785] loop0: detected capacity change from 0 to 264192 [ 90.181678][ T3789] loop5: detected capacity change from 0 to 264192 [ 90.185306][ T3788] loop2: detected capacity change from 0 to 264192 [ 90.201234][ T3794] loop3: detected capacity change from 0 to 264192 [ 90.220181][ T3790] device lo entered promiscuous mode [ 90.276449][ T3796] Y4`Ҙ: renamed from lo 04:30:56 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:30:56 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x12) (async) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') (async) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000001840)=ANY=[@ANYRES32, @ANYRES32, @ANYRESOCT, @ANYRES32, @ANYRES32, @ANYRES64, @ANYRESHEX], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x40025) (async) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f000004a9c0)={{0x0, 0x800, 0x6, 0xffffffffffff0000, 0xb0, 0x9bd, 0x80000001, 0x5, 0x5, 0x81, 0x9, 0x80000000, 0x1fe000000, 0xb5, 0x9}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004b9c0)={0x0}) r4 = creat(&(0x7f0000000140)='./file0\x00', 0x8) fallocate(r4, 0x0, 0x0, 0x2000402) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000001440)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f00000008c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) (async) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') (async) sendmsg$NLBL_CIPSOV4_C_REMOVE(r9, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000001840)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYRESOCT, @ANYRES32=r6, @ANYRES32, @ANYRES64, @ANYRESHEX], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x40025) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004bbc0)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {r3, r6}], 0x13, "2f0e08ab2666a8"}) (async) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="c7"], 0x4) (async) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 04:30:56 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x50, 0x3}, 0xd00}, @generic={0x5, "c9f82881cf2383c34673609a3c75"}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xf0f4, 0x0, 0x0, 0x0, 0x8005, &(0x7f0000000240)='veth1_to_team\x00', 0x1, 0x7000000}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r6, @ANYRESHEX=r5, @ANYRESOCT=r4, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) 04:30:56 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x50, 0x3}, 0xd00}, @generic={0x5, "c9f82881cf2383c34673609a3c75"}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xf0f4, 0x0, 0x0, 0x0, 0x8005, &(0x7f0000000240)='veth1_to_team\x00', 0x1, 0x7000000}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000001640)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:30:56 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x12) (async) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') (async) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000001840)=ANY=[@ANYRES32, @ANYRES32, @ANYRESOCT, @ANYRES32, @ANYRES32, @ANYRES64, @ANYRESHEX], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x40025) (async) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f000004a9c0)={{0x0, 0x800, 0x6, 0xffffffffffff0000, 0xb0, 0x9bd, 0x80000001, 0x5, 0x5, 0x81, 0x9, 0x80000000, 0x1fe000000, 0xb5, 0x9}}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004b9c0)={0x0}) r4 = creat(&(0x7f0000000140)='./file0\x00', 0x8) fallocate(r4, 0x0, 0x0, 0x2000402) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000001440)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f00000008c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) (async) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') (async, rerun: 64) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') (async, rerun: 64) sendmsg$NLBL_CIPSOV4_C_REMOVE(r9, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000001840)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYRESOCT, @ANYRES32=r6, @ANYRES32, @ANYRES64, @ANYRESHEX], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x40025) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004bbc0)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {r3, r6}], 0x13, "2f0e08ab2666a8"}) (async) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="c7"], 0x4) (async, rerun: 64) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) [ 90.468675][ T3810] loop3: detected capacity change from 0 to 264192 04:30:56 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x50, 0x3}, 0xd00}, @generic={0x5, "c9f82881cf2383c34673609a3c75"}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xf0f4, 0x0, 0x0, 0x0, 0x8005, &(0x7f0000000240)='veth1_to_team\x00', 0x1, 0x7000000}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r6, @ANYRESHEX=r5, @ANYRESOCT=r4, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) [ 90.546574][ T3821] loop5: detected capacity change from 0 to 264192 [ 90.557310][ T3823] loop2: detected capacity change from 0 to 264192 [ 90.593297][ T3830] loop0: detected capacity change from 0 to 264192 04:30:59 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) (async) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {r1, r2+60000000}}, &(0x7f0000000440)) (async) futex(&(0x7f0000000280)=0x1, 0x6, 0x0, 0x0, 0x0, 0x1a0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) clock_gettime(0x0, 0x0) (async) timer_settime(r3, 0x1, &(0x7f0000000140)={{0x0, 0x989680}}, &(0x7f00000001c0)) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001840)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) (async) futex(&(0x7f0000000240)=0x2, 0x0, 0x2, 0x0, 0x0, 0x1) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x2, 0x9, 0x6, 0x0, 0xd, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_sa={0x2, 0x1, 0x4d2, 0xff, 0x12, 0x4e, 0x4, 0x60000000}, @sadb_x_nat_t_type={0x1}, @sadb_address={0x3, 0x7108e18d91691861, 0x2b, 0x80, 0x0, @in={0x2, 0x4e24, @empty}}, @sadb_x_filter={0x5, 0x1a, @in=@empty, @in6=@local, 0x5, 0x14}]}, 0x68}}, 0x8010) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) (async) futex(0x0, 0x4, 0x0, 0x0, 0x0, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 04:30:59 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x50, 0x3}, 0xd00}, @generic={0x5, "c9f82881cf2383c34673609a3c75"}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xf0f4, 0x0, 0x0, 0x0, 0x8005, &(0x7f0000000240)='veth1_to_team\x00', 0x1, 0x7000000}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r6, @ANYRESHEX=r5, @ANYRESOCT=r4, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) 04:30:59 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:30:59 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x50, 0x3}, 0xd00}, @generic={0x5, "c9f82881cf2383c34673609a3c75"}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xf0f4, 0x0, 0x0, 0x0, 0x8005, &(0x7f0000000240)='veth1_to_team\x00', 0x1, 0x7000000}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000001640)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:30:59 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x50, 0x3}, 0xd00}, @generic={0x5, "c9f82881cf2383c34673609a3c75"}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xf0f4, 0x0, 0x0, 0x0, 0x8005, &(0x7f0000000240)='veth1_to_team\x00', 0x1, 0x7000000}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r7, @ANYRESHEX=r6, @ANYRESOCT=r5, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r6, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid}) 04:30:59 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x50, 0x3}, 0xd00}, @generic={0x5, "c9f82881cf2383c34673609a3c75"}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xf0f4, 0x0, 0x0, 0x0, 0x8005, &(0x7f0000000240)='veth1_to_team\x00', 0x1, 0x7000000}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r6, @ANYRESHEX=r5, @ANYRESOCT=r4, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) [ 93.231506][ T3841] loop4: detected capacity change from 0 to 264192 [ 93.237752][ T3843] loop2: detected capacity change from 0 to 264192 [ 93.240050][ T3844] loop5: detected capacity change from 0 to 264192 [ 93.251375][ T3845] loop3: detected capacity change from 0 to 264192 [ 93.261939][ T3847] loop0: detected capacity change from 0 to 264192 04:30:59 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:30:59 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x50, 0x3}, 0xd00}, @generic={0x5, "c9f82881cf2383c34673609a3c75"}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xf0f4, 0x0, 0x0, 0x0, 0x8005, &(0x7f0000000240)='veth1_to_team\x00', 0x1, 0x7000000}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r7, @ANYRESHEX=r6, @ANYRESOCT=r5, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r6, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid}) 04:30:59 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x50, 0x3}, 0xd00}, @generic={0x5, "c9f82881cf2383c34673609a3c75"}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xf0f4, 0x0, 0x0, 0x0, 0x8005, &(0x7f0000000240)='veth1_to_team\x00', 0x1, 0x7000000}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000001640)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) [ 93.515980][ T3856] loop3: detected capacity change from 0 to 264192 04:30:59 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x50, 0x3}, 0xd00}, @generic={0x5, "c9f82881cf2383c34673609a3c75"}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xf0f4, 0x0, 0x0, 0x0, 0x8005, &(0x7f0000000240)='veth1_to_team\x00', 0x1, 0x7000000}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r6, @ANYRESHEX=r5, @ANYRESOCT=r4, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:30:59 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x50, 0x3}, 0xd00}, @generic={0x5, "c9f82881cf2383c34673609a3c75"}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xf0f4, 0x0, 0x0, 0x0, 0x8005, &(0x7f0000000240)='veth1_to_team\x00', 0x1, 0x7000000}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r6, @ANYRESHEX=r5, @ANYRESOCT=r4, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) [ 93.611901][ T3860] loop5: detected capacity change from 0 to 264192 [ 93.621510][ T3861] loop2: detected capacity change from 0 to 264192 [ 93.636044][ T3864] loop4: detected capacity change from 0 to 264192 [ 93.637061][ T3865] loop0: detected capacity change from 0 to 264192 04:30:59 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x1fc00) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 93.772486][ T3871] loop3: detected capacity change from 0 to 264192 04:31:02 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x50, 0x3}, 0xd00}, @generic={0x5, "c9f82881cf2383c34673609a3c75"}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xf0f4, 0x0, 0x0, 0x0, 0x8005, &(0x7f0000000240)='veth1_to_team\x00', 0x1, 0x7000000}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r7, @ANYRESHEX=r6, @ANYRESOCT=r5, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r6, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid}) 04:31:02 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x1fc00) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:02 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x50, 0x3}, 0xd00}, @generic={0x5, "c9f82881cf2383c34673609a3c75"}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xf0f4, 0x0, 0x0, 0x0, 0x8005, &(0x7f0000000240)='veth1_to_team\x00', 0x1, 0x7000000}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r7, @ANYRESHEX=r6, @ANYRESOCT=r5, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r6, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid}) 04:31:02 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x50, 0x3}, 0xd00}, @generic={0x5, "c9f82881cf2383c34673609a3c75"}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xf0f4, 0x0, 0x0, 0x0, 0x8005, &(0x7f0000000240)='veth1_to_team\x00', 0x1, 0x7000000}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r6, @ANYRESHEX=r5, @ANYRESOCT=r4, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:31:02 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x50, 0x3}, 0xd00}, @generic={0x5, "c9f82881cf2383c34673609a3c75"}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xf0f4, 0x0, 0x0, 0x0, 0x8005, &(0x7f0000000240)='veth1_to_team\x00', 0x1, 0x7000000}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000001640)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:31:02 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x50, 0x3}, 0xd00}, @generic={0x5, "c9f82881cf2383c34673609a3c75"}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xf0f4, 0x0, 0x0, 0x0, 0x8005, &(0x7f0000000240)='veth1_to_team\x00', 0x1, 0x7000000}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r6, @ANYRESHEX=r5, @ANYRESOCT=r4, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) [ 96.270902][ T3877] loop4: detected capacity change from 0 to 264192 [ 96.273679][ T3880] loop3: detected capacity change from 0 to 264192 [ 96.277839][ T3878] loop2: detected capacity change from 0 to 264192 [ 96.284000][ T3879] loop5: detected capacity change from 0 to 264192 [ 96.294567][ T3881] loop0: detected capacity change from 0 to 264192 [ 96.328627][ T3883] loop1: detected capacity change from 0 to 264192 04:31:02 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x1fc00) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 96.459034][ T3890] loop3: detected capacity change from 0 to 264192 04:31:02 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x50, 0x3}, 0xd00}, @generic={0x5, "c9f82881cf2383c34673609a3c75"}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xf0f4, 0x0, 0x0, 0x0, 0x8005, &(0x7f0000000240)='veth1_to_team\x00', 0x1, 0x7000000}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000001640)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:31:02 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:02 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x50, 0x3}, 0xd00}, @generic={0x5, "c9f82881cf2383c34673609a3c75"}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xf0f4, 0x0, 0x0, 0x0, 0x8005, &(0x7f0000000240)='veth1_to_team\x00', 0x1, 0x7000000}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000001640)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:02 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x50, 0x3}, 0xd00}, @generic={0x5, "c9f82881cf2383c34673609a3c75"}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xf0f4, 0x0, 0x0, 0x0, 0x8005, &(0x7f0000000240)='veth1_to_team\x00', 0x1, 0x7000000}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r5}) [ 96.662612][ T3894] loop0: detected capacity change from 0 to 264192 [ 96.665756][ T1921] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 96.672851][ T3896] loop2: detected capacity change from 0 to 264192 [ 96.678336][ T1921] Buffer I/O error on dev loop0, logical block 0, async page read [ 96.687049][ T3893] loop3: detected capacity change from 0 to 264192 04:31:02 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x50, 0x3}, 0xd00}, @generic={0x5, "c9f82881cf2383c34673609a3c75"}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xf0f4, 0x0, 0x0, 0x0, 0x8005, &(0x7f0000000240)='veth1_to_team\x00', 0x1, 0x7000000}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r6, @ANYRESHEX=r5, @ANYRESOCT=r4, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:31:02 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 96.754831][ T3898] loop5: detected capacity change from 0 to 264192 [ 96.783201][ T3902] loop4: detected capacity change from 0 to 264192 04:31:02 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 96.835095][ T3905] loop1: detected capacity change from 0 to 264192 04:31:02 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x50, 0x3}, 0xd00}, @generic={0x5, "c9f82881cf2383c34673609a3c75"}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xf0f4, 0x0, 0x0, 0x0, 0x8005, &(0x7f0000000240)='veth1_to_team\x00', 0x1, 0x7000000}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000001640)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 96.893602][ T3909] loop3: detected capacity change from 0 to 264192 [ 96.893892][ T2297] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 96.909354][ T2297] Buffer I/O error on dev loop3, logical block 0, async page read [ 96.949427][ T3912] loop2: detected capacity change from 0 to 264192 04:31:03 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x50, 0x3}, 0xd00}, @generic={0x5, "c9f82881cf2383c34673609a3c75"}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xf0f4, 0x0, 0x0, 0x0, 0x8005, &(0x7f0000000240)='veth1_to_team\x00', 0x1, 0x7000000}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000001640)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:31:03 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:03 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 97.091400][ T3917] loop0: detected capacity change from 0 to 264192 [ 97.099038][ T3916] loop3: detected capacity change from 0 to 264192 [ 97.142856][ T3919] loop1: detected capacity change from 0 to 264192 04:31:03 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x50, 0x3}, 0xd00}, @generic={0x5, "c9f82881cf2383c34673609a3c75"}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xf0f4, 0x0, 0x0, 0x0, 0x8005, &(0x7f0000000240)='veth1_to_team\x00', 0x1, 0x7000000}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r5}) 04:31:03 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:03 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x50, 0x3}, 0xd00}, @generic={0x5, "c9f82881cf2383c34673609a3c75"}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xf0f4, 0x0, 0x0, 0x0, 0x8005, &(0x7f0000000240)='veth1_to_team\x00', 0x1, 0x7000000}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 97.250078][ T3922] loop5: detected capacity change from 0 to 264192 [ 97.280799][ T3925] loop3: detected capacity change from 0 to 264192 04:31:03 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x50, 0x3}, 0xd00}, @generic={0x5, "c9f82881cf2383c34673609a3c75"}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xf0f4, 0x0, 0x0, 0x0, 0x8005, &(0x7f0000000240)='veth1_to_team\x00', 0x1, 0x7000000}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000001640)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 97.329809][ T3927] loop4: detected capacity change from 0 to 264192 04:31:03 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:03 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x50, 0x3}, 0xd00}, @generic={0x5, "c9f82881cf2383c34673609a3c75"}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xf0f4, 0x0, 0x0, 0x0, 0x8005, &(0x7f0000000240)='veth1_to_team\x00', 0x1, 0x7000000}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000001640)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) [ 97.403559][ T3930] loop2: detected capacity change from 0 to 264192 04:31:03 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x50, 0x3}, 0xd00}, @generic={0x5, "c9f82881cf2383c34673609a3c75"}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xf0f4, 0x0, 0x0, 0x0, 0x8005, &(0x7f0000000240)='veth1_to_team\x00', 0x1, 0x7000000}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 97.491158][ T3934] loop1: detected capacity change from 0 to 264192 [ 97.503897][ T3937] loop3: detected capacity change from 0 to 264192 [ 97.510835][ T3938] loop0: detected capacity change from 0 to 264192 04:31:03 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x50, 0x3}, 0xd00}, @generic={0x5, "c9f82881cf2383c34673609a3c75"}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xf0f4, 0x0, 0x0, 0x0, 0x8005, &(0x7f0000000240)='veth1_to_team\x00', 0x1, 0x7000000}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r5}) 04:31:03 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x50, 0x3}, 0xd00}, @generic={0x5, "c9f82881cf2383c34673609a3c75"}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xf0f4, 0x0, 0x0, 0x0, 0x8005, &(0x7f0000000240)='veth1_to_team\x00', 0x1, 0x7000000}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r7, @ANYRESHEX=r6, @ANYRESOCT=r5, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r6, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r8}) [ 97.625655][ T3941] loop4: detected capacity change from 0 to 264192 [ 97.634167][ T3943] loop5: detected capacity change from 0 to 264192 04:31:03 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:03 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x50, 0x3}, 0xd00}, @generic={0x5, "c9f82881cf2383c34673609a3c75"}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xf0f4, 0x0, 0x0, 0x0, 0x8005, &(0x7f0000000240)='veth1_to_team\x00', 0x1, 0x7000000}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:03 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x50, 0x3}, 0xd00}, @generic={0x5, "c9f82881cf2383c34673609a3c75"}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xf0f4, 0x0, 0x0, 0x0, 0x8005, &(0x7f0000000240)='veth1_to_team\x00', 0x1, 0x7000000}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 97.754072][ T3948] loop3: detected capacity change from 0 to 264192 [ 97.820177][ T3950] loop2: detected capacity change from 0 to 264192 [ 97.820388][ T3952] loop1: detected capacity change from 0 to 264192 04:31:04 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r0 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(0xffffffffffffffff, r0, 0x0, 0x1fc00) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:04 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x50, 0x3}, 0xd00}, @generic={0x5, "c9f82881cf2383c34673609a3c75"}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xf0f4, 0x0, 0x0, 0x0, 0x8005, &(0x7f0000000240)='veth1_to_team\x00', 0x1, 0x7000000}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) [ 97.949018][ T3956] loop3: detected capacity change from 0 to 264192 [ 97.965198][ T3958] loop0: detected capacity change from 0 to 264192 04:31:04 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x50, 0x3}, 0xd00}, @generic={0x5, "c9f82881cf2383c34673609a3c75"}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xf0f4, 0x0, 0x0, 0x0, 0x8005, &(0x7f0000000240)='veth1_to_team\x00', 0x1, 0x7000000}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, 0x0, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r5}) 04:31:04 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x50, 0x3}, 0xd00}, @generic={0x5, "c9f82881cf2383c34673609a3c75"}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xf0f4, 0x0, 0x0, 0x0, 0x8005, &(0x7f0000000240)='veth1_to_team\x00', 0x1, 0x7000000}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:04 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x50, 0x3}, 0xd00}, @generic={0x5, "c9f82881cf2383c34673609a3c75"}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xf0f4, 0x0, 0x0, 0x0, 0x8005, &(0x7f0000000240)='veth1_to_team\x00', 0x1, 0x7000000}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:04 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x50, 0x3}, 0xd00}, @generic={0x5, "c9f82881cf2383c34673609a3c75"}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xf0f4, 0x0, 0x0, 0x0, 0x8005, &(0x7f0000000240)='veth1_to_team\x00', 0x1, 0x7000000}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r7, @ANYRESHEX=r6, @ANYRESOCT=r5, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r6, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r8}) 04:31:04 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r0 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(0xffffffffffffffff, r0, 0x0, 0x1fc00) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 98.086186][ T3961] loop5: detected capacity change from 0 to 264192 [ 98.110527][ T3963] loop2: detected capacity change from 0 to 264192 [ 98.146578][ T3965] loop1: detected capacity change from 0 to 264192 [ 98.163694][ T3967] loop3: detected capacity change from 0 to 264192 [ 98.173777][ T3969] loop4: detected capacity change from 0 to 264192 [ 98.176542][ T1921] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 98.189489][ T1921] Buffer I/O error on dev loop4, logical block 0, async page read 04:31:04 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r0 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(0xffffffffffffffff, r0, 0x0, 0x1fc00) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:04 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x50, 0x3}, 0xd00}, @generic={0x5, "c9f82881cf2383c34673609a3c75"}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xf0f4, 0x0, 0x0, 0x0, 0x8005, &(0x7f0000000240)='veth1_to_team\x00', 0x1, 0x7000000}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) [ 98.327971][ T3975] loop3: detected capacity change from 0 to 264192 [ 98.329409][ T1921] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 98.343805][ T1921] Buffer I/O error on dev loop3, logical block 0, async page read 04:31:04 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x50, 0x3}, 0xd00}, @generic={0x5, "c9f82881cf2383c34673609a3c75"}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xf0f4, 0x0, 0x0, 0x0, 0x8005, &(0x7f0000000240)='veth1_to_team\x00', 0x1, 0x7000000}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:04 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x50, 0x3}, 0xd00}, @generic={0x5, "c9f82881cf2383c34673609a3c75"}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xf0f4, 0x0, 0x0, 0x0, 0x8005, &(0x7f0000000240)='veth1_to_team\x00', 0x1, 0x7000000}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) [ 98.370332][ T3977] loop0: detected capacity change from 0 to 264192 [ 98.399559][ T3979] loop2: detected capacity change from 0 to 264192 [ 98.400128][ T2297] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 98.414446][ T3981] loop1: detected capacity change from 0 to 264192 [ 98.415214][ T2297] Buffer I/O error on dev loop2, logical block 0, async page read 04:31:04 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:04 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x50, 0x3}, 0xd00}, @generic={0x5, "c9f82881cf2383c34673609a3c75"}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xf0f4, 0x0, 0x0, 0x0, 0x8005, &(0x7f0000000240)='veth1_to_team\x00', 0x1, 0x7000000}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, 0x0, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r5}) [ 98.555037][ T3985] loop3: detected capacity change from 0 to 264192 [ 98.631638][ T3988] loop5: detected capacity change from 0 to 264192 04:31:04 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x50, 0x3}, 0xd00}, @generic={0x5, "c9f82881cf2383c34673609a3c75"}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xf0f4, 0x0, 0x0, 0x0, 0x8005, &(0x7f0000000240)='veth1_to_team\x00', 0x1, 0x7000000}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:31:04 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000001640)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 98.675255][ T3979] syz-executor.2 (3979) used greatest stack depth: 10640 bytes left 04:31:04 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x50, 0x3}, 0xd00}, @generic={0x5, "c9f82881cf2383c34673609a3c75"}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xf0f4, 0x0, 0x0, 0x0, 0x8005, &(0x7f0000000240)='veth1_to_team\x00', 0x1, 0x7000000}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r7, @ANYRESHEX=r6, @ANYRESOCT=r5, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r6, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r8}) [ 98.749770][ T3992] loop2: detected capacity change from 0 to 264192 [ 98.759975][ T3994] loop0: detected capacity change from 0 to 264192 [ 98.778167][ T3996] loop4: detected capacity change from 0 to 264192 [ 98.781629][ T1921] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 04:31:04 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x50, 0x3}, 0xd00}, @generic={0x5, "c9f82881cf2383c34673609a3c75"}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xf0f4, 0x0, 0x0, 0x0, 0x8005, &(0x7f0000000240)='veth1_to_team\x00', 0x1, 0x7000000}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) [ 98.793909][ T1921] Buffer I/O error on dev loop4, logical block 0, async page read [ 98.833280][ T3998] loop1: detected capacity change from 0 to 264192 04:31:05 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x50, 0x3}, 0xd00}, @generic={0x5, "c9f82881cf2383c34673609a3c75"}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xf0f4, 0x0, 0x0, 0x0, 0x8005, &(0x7f0000000240)='veth1_to_team\x00', 0x1, 0x7000000}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, 0x0, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r5}) 04:31:05 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:05 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) [ 99.025879][ T4004] loop5: detected capacity change from 0 to 264192 [ 99.045163][ T4006] loop2: detected capacity change from 0 to 264192 04:31:05 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 99.115235][ T4008] loop0: detected capacity change from 0 to 264192 04:31:05 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:05 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x50, 0x3}, 0xd00}, @generic={0x5, "c9f82881cf2383c34673609a3c75"}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xf0f4, 0x0, 0x0, 0x0, 0x8005, &(0x7f0000000240)='veth1_to_team\x00', 0x1, 0x7000000}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:31:05 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x50, 0x3}, 0xd00}, @generic={0x5, "c9f82881cf2383c34673609a3c75"}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xf0f4, 0x0, 0x0, 0x0, 0x8005, &(0x7f0000000240)='veth1_to_team\x00', 0x1, 0x7000000}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r6, @ANYRESHEX=r5, @ANYRESOCT=r4, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) [ 99.219226][ T4013] loop3: detected capacity change from 0 to 264192 [ 99.251565][ T4015] loop2: detected capacity change from 0 to 264192 [ 99.279986][ T4017] loop4: detected capacity change from 0 to 264192 [ 99.293437][ T4019] loop1: detected capacity change from 0 to 264192 04:31:05 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r7, @ANYRESHEX=r6, @ANYRESOCT=r5, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r6, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r8}) 04:31:05 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:05 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) [ 99.471761][ T4025] loop5: detected capacity change from 0 to 264192 [ 99.511305][ T4028] loop2: detected capacity change from 0 to 264192 [ 99.530915][ T4029] loop0: detected capacity change from 0 to 264192 04:31:05 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x50, 0x3}, 0xd00}, @generic={0x5, "c9f82881cf2383c34673609a3c75"}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xf0f4, 0x0, 0x0, 0x0, 0x8005, &(0x7f0000000240)='veth1_to_team\x00', 0x1, 0x7000000}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:05 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x50, 0x3}, 0xd00}, @generic={0x5, "c9f82881cf2383c34673609a3c75"}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xf0f4, 0x0, 0x0, 0x0, 0x8005, &(0x7f0000000240)='veth1_to_team\x00', 0x1, 0x7000000}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r6, @ANYRESHEX=r5, @ANYRESOCT=r4, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) [ 99.674060][ T4034] loop1: detected capacity change from 0 to 264192 [ 99.691360][ T4036] loop4: detected capacity change from 0 to 264192 04:31:05 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:05 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r7, @ANYRESHEX=r6, @ANYRESOCT=r5, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r6, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r8}) 04:31:05 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 99.794390][ T4040] loop5: detected capacity change from 0 to 264192 [ 99.820221][ T4042] loop2: detected capacity change from 0 to 264192 04:31:06 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) [ 99.859838][ T4044] loop3: detected capacity change from 0 to 264192 [ 99.953169][ T4048] loop0: detected capacity change from 0 to 264192 04:31:06 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x50, 0x3}, 0xd00}, @generic={0x5, "c9f82881cf2383c34673609a3c75"}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xf0f4, 0x0, 0x0, 0x0, 0x8005, &(0x7f0000000240)='veth1_to_team\x00', 0x1, 0x7000000}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:06 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:06 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x50, 0x3}, 0xd00}, @generic={0x5, "c9f82881cf2383c34673609a3c75"}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xf0f4, 0x0, 0x0, 0x0, 0x8005, &(0x7f0000000240)='veth1_to_team\x00', 0x1, 0x7000000}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000001640)) 04:31:06 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r6, @ANYRESHEX=r5, @ANYRESOCT=r4, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r5, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r7}) [ 100.076859][ T4053] loop1: detected capacity change from 0 to 264192 [ 100.086789][ T4054] loop2: detected capacity change from 0 to 264192 [ 100.130907][ T4056] loop4: detected capacity change from 0 to 264192 [ 100.172379][ T4059] loop5: detected capacity change from 0 to 264192 04:31:06 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:06 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) [ 100.341880][ T4064] loop2: detected capacity change from 0 to 264192 04:31:06 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x50, 0x3}, 0xd00}, @generic={0x5, "c9f82881cf2383c34673609a3c75"}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xf0f4, 0x0, 0x0, 0x0, 0x8005, &(0x7f0000000240)='veth1_to_team\x00', 0x1, 0x7000000}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 100.398807][ T4066] loop0: detected capacity change from 0 to 264192 [ 100.428093][ T4068] loop1: detected capacity change from 0 to 264192 04:31:06 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) 04:31:06 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:06 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x50, 0x3}, 0xd00}, @generic={0x5, "c9f82881cf2383c34673609a3c75"}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xf0f4, 0x0, 0x0, 0x0, 0x8005, &(0x7f0000000240)='veth1_to_team\x00', 0x1, 0x7000000}) 04:31:06 executing program 3: chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 100.529421][ T4072] loop2: detected capacity change from 0 to 264192 [ 100.536499][ T4074] loop5: detected capacity change from 0 to 264192 [ 100.539732][ T4076] loop4: detected capacity change from 0 to 264192 04:31:06 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 100.695127][ T4083] loop2: detected capacity change from 0 to 264192 04:31:06 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:31:06 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:06 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) socket$inet_tcp(0x2, 0x1, 0x0) [ 100.812455][ T4085] loop0: detected capacity change from 0 to 264192 [ 100.827582][ T4087] loop1: detected capacity change from 0 to 264192 04:31:06 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:06 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r4, @ANYRESHEX=r3, @ANYRESOCT=r2, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{}, r3, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r5}) [ 100.906279][ T4089] loop4: detected capacity change from 0 to 264192 [ 100.919714][ T4092] loop2: detected capacity change from 0 to 264192 [ 100.930417][ T4094] loop5: detected capacity change from 0 to 264192 04:31:07 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 101.025429][ T4097] loop1: detected capacity change from 0 to 264192 04:31:07 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 101.122068][ T4102] loop2: detected capacity change from 0 to 264192 04:31:07 executing program 3: chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:07 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:07 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) 04:31:07 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:31:07 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:07 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r4, @ANYRESHEX=r3, @ANYRESOCT=r2, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{}, r3, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r5}) [ 101.289138][ T4109] loop4: detected capacity change from 0 to 264192 [ 101.292517][ T4110] loop0: detected capacity change from 0 to 264192 [ 101.302807][ T4111] loop1: detected capacity change from 0 to 264192 [ 101.319452][ T4113] loop2: detected capacity change from 0 to 264192 [ 101.374692][ T4115] loop5: detected capacity change from 0 to 264192 04:31:07 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:07 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 101.516682][ T4121] loop2: detected capacity change from 0 to 264192 [ 101.574677][ T4123] loop1: detected capacity change from 0 to 264192 04:31:07 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:07 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:31:07 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) [ 101.666891][ T4126] loop2: detected capacity change from 0 to 264192 [ 101.701329][ T4109] syz-executor.4 (4109) used greatest stack depth: 10576 bytes left 04:31:07 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r4, @ANYRESHEX=r3, @ANYRESOCT=r2, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{}, r3, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r5}) [ 101.728191][ T4128] loop0: detected capacity change from 0 to 264192 [ 101.742346][ T4130] loop4: detected capacity change from 0 to 264192 [ 101.779338][ T4132] loop5: detected capacity change from 0 to 264192 04:31:07 executing program 3: chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:07 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x1fc00) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:07 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 101.886627][ T4137] loop1: detected capacity change from 0 to 264192 [ 101.903145][ T4140] loop2: detected capacity change from 0 to 264192 04:31:08 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r0 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(0xffffffffffffffff, r0, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:08 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x1fc00) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:08 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) [ 102.064031][ T4145] loop2: detected capacity change from 0 to 264192 [ 102.067682][ T4146] loop1: detected capacity change from 0 to 264192 04:31:08 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) [ 102.140334][ T4148] loop4: detected capacity change from 0 to 264192 04:31:08 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x1fc00) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:08 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r4, @ANYRESHEX=r3, @ANYRESOCT=r2, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000c00)={{r1}, r3, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r5}) 04:31:08 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r0 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(0xffffffffffffffff, r0, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 102.182385][ T4150] loop0: detected capacity change from 0 to 264192 [ 102.261021][ T4152] loop1: detected capacity change from 0 to 264192 [ 102.279932][ T4156] loop5: detected capacity change from 0 to 264192 [ 102.288149][ T4157] loop2: detected capacity change from 0 to 264192 04:31:08 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r4, @ANYRESHEX=r3, @ANYRESOCT=r2, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000c00)={{r1}, r3, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r5}) 04:31:08 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 102.406821][ T4159] loop5: detected capacity change from 0 to 264192 04:31:08 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:31:08 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r4, @ANYRESHEX=r3, @ANYRESOCT=r2, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000c00)={{r1}, r3, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r5}) 04:31:08 executing program 3: syz_mount_image$vfat(0x0, &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:08 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r0 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(0xffffffffffffffff, r0, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 102.464942][ T4161] loop1: detected capacity change from 0 to 264192 [ 102.492791][ T4163] loop3: detected capacity change from 0 to 264192 04:31:08 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) [ 102.525414][ T4166] loop5: detected capacity change from 0 to 264192 [ 102.534228][ T4168] loop0: detected capacity change from 0 to 264192 [ 102.554135][ T4169] loop2: detected capacity change from 0 to 264192 04:31:08 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) 04:31:08 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:08 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) [ 102.625519][ T4173] loop5: detected capacity change from 0 to 264192 04:31:08 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 102.700355][ T4175] loop4: detected capacity change from 0 to 264192 [ 102.711599][ T4178] loop5: detected capacity change from 0 to 264192 [ 102.719834][ T4179] loop1: detected capacity change from 0 to 264192 [ 102.755776][ T4181] loop2: detected capacity change from 0 to 264192 04:31:08 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) 04:31:08 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:31:08 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) 04:31:09 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:09 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) [ 102.882108][ T4186] loop0: detected capacity change from 0 to 264192 [ 102.907408][ T4188] loop5: detected capacity change from 0 to 264192 04:31:09 executing program 3: syz_mount_image$vfat(0x0, &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:09 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:09 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) [ 102.937709][ T4190] loop1: detected capacity change from 0 to 264192 [ 102.966301][ T4192] loop0: detected capacity change from 0 to 264192 [ 103.003467][ T4194] loop5: detected capacity change from 0 to 264192 [ 103.025072][ T4196] loop2: detected capacity change from 0 to 264192 04:31:09 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x1fc00) 04:31:09 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) 04:31:09 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) [ 103.060938][ T4198] loop3: detected capacity change from 0 to 264192 [ 103.100626][ T4201] loop5: detected capacity change from 0 to 264192 [ 103.101981][ T4202] loop0: detected capacity change from 0 to 264192 04:31:09 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r0 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r4, @ANYRESHEX=r3, @ANYRESOCT=r2, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000c00)={{r1}, r3, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r5}) 04:31:09 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:09 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:31:09 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x1fc00) [ 103.154258][ T4206] loop4: detected capacity change from 0 to 264192 [ 103.215523][ T4208] loop1: detected capacity change from 0 to 264192 [ 103.229339][ T4212] loop4: detected capacity change from 0 to 264192 [ 103.229802][ T2297] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 103.242964][ T4213] loop5: detected capacity change from 0 to 264192 [ 103.245086][ T2297] Buffer I/O error on dev loop4, logical block 0, async page read 04:31:09 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r0 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r4, @ANYRESHEX=r3, @ANYRESOCT=r2, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000c00)={{r1}, r3, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r5}) [ 103.265958][ T4214] loop0: detected capacity change from 0 to 264192 04:31:09 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x1fc00) [ 103.348598][ T4216] loop5: detected capacity change from 0 to 264192 [ 103.384657][ T4218] loop4: detected capacity change from 0 to 264192 04:31:09 executing program 3: syz_mount_image$vfat(0x0, &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:09 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:31:09 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:09 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:09 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r0 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r4, @ANYRESHEX=r3, @ANYRESOCT=r2, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000c00)={{r1}, r3, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r5}) 04:31:09 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) [ 103.443463][ T4220] loop0: detected capacity change from 0 to 264192 [ 103.450273][ T4222] loop5: detected capacity change from 0 to 264192 [ 103.450585][ T4224] loop1: detected capacity change from 0 to 264192 [ 103.470143][ T4226] loop2: detected capacity change from 0 to 264192 04:31:09 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) 04:31:09 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) [ 103.506229][ T4228] loop3: detected capacity change from 0 to 264192 [ 103.531410][ T4231] loop4: detected capacity change from 0 to 264192 [ 103.544381][ T4233] loop5: detected capacity change from 0 to 264192 04:31:09 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:31:09 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:09 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) [ 103.546080][ T1441] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 103.552910][ T4234] loop0: detected capacity change from 0 to 264192 [ 103.560141][ T1441] Buffer I/O error on dev loop5, logical block 0, async page read [ 103.630225][ T4239] loop1: detected capacity change from 0 to 264192 [ 103.633592][ T1921] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 103.645933][ T1921] Buffer I/O error on dev loop1, logical block 0, async page read [ 103.676257][ T4243] loop4: detected capacity change from 0 to 264192 [ 103.704832][ T4242] loop0: detected capacity change from 0 to 264192 04:31:09 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r0 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(0xffffffffffffffff, r0, 0x0, 0x1fc00) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:09 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) 04:31:09 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:31:09 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:09 executing program 2: chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:09 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) 04:31:09 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r0 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(0xffffffffffffffff, r0, 0x0, 0x1fc00) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 103.832090][ T4245] loop1: detected capacity change from 0 to 264192 [ 103.853994][ T4248] loop4: detected capacity change from 0 to 264192 [ 103.861568][ T4249] loop0: detected capacity change from 0 to 264192 04:31:10 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) [ 103.901759][ T4253] loop5: detected capacity change from 0 to 264192 [ 103.903906][ T4255] loop1: detected capacity change from 0 to 264192 [ 103.924158][ T4257] loop3: detected capacity change from 0 to 264192 04:31:10 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) [ 103.961075][ T4259] loop4: detected capacity change from 0 to 264192 04:31:10 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) 04:31:10 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r0 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(0xffffffffffffffff, r0, 0x0, 0x1fc00) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:10 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) [ 104.029891][ T4263] loop0: detected capacity change from 0 to 264192 [ 104.054179][ T4266] loop4: detected capacity change from 0 to 264192 [ 104.059174][ T1921] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 104.070056][ T1921] Buffer I/O error on dev loop4, logical block 0, async page read 04:31:10 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r0 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) [ 104.098369][ T4268] loop1: detected capacity change from 0 to 264192 [ 104.131826][ T4272] loop0: detected capacity change from 0 to 264192 [ 104.133185][ T2297] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 04:31:10 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r0 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(0xffffffffffffffff, r0, 0x0, 0x1fc00) 04:31:10 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r0 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) [ 104.147532][ T2297] Buffer I/O error on dev loop0, logical block 0, async page read [ 104.168722][ T4274] loop4: detected capacity change from 0 to 264192 04:31:10 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:10 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) 04:31:10 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:10 executing program 2: chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:10 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r0 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) [ 104.219039][ T4276] loop0: detected capacity change from 0 to 264192 [ 104.233190][ T4278] loop1: detected capacity change from 0 to 264192 [ 104.248083][ T4281] loop5: detected capacity change from 0 to 264192 [ 104.255730][ T4282] loop3: detected capacity change from 0 to 264192 04:31:10 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:31:10 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r0 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(0xffffffffffffffff, r0, 0x0, 0x1fc00) 04:31:10 executing program 5: chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) 04:31:10 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:31:10 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r0 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(0xffffffffffffffff, r0, 0x0, 0x1fc00) [ 104.360909][ T4293] loop0: detected capacity change from 0 to 264192 [ 104.383630][ T4296] loop4: detected capacity change from 0 to 264192 04:31:10 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:10 executing program 2: chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:10 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:10 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) [ 104.474774][ T4302] loop3: detected capacity change from 0 to 264192 [ 104.477021][ T4301] loop0: detected capacity change from 0 to 264192 [ 104.498982][ T4304] loop4: detected capacity change from 0 to 264192 [ 104.535872][ T4309] loop1: detected capacity change from 0 to 264192 [ 104.560495][ T4313] loop4: detected capacity change from 0 to 264192 04:31:10 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:31:10 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:10 executing program 5: chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) 04:31:10 executing program 2: syz_mount_image$vfat(0x0, &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:10 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) [ 104.669293][ T4317] loop0: detected capacity change from 0 to 264192 [ 104.669592][ T4288] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 104.684977][ T4288] Buffer I/O error on dev loop0, logical block 0, async page read [ 104.713729][ T4322] loop3: detected capacity change from 0 to 264192 [ 104.723480][ T4324] loop2: detected capacity change from 0 to 264192 [ 104.734495][ T4325] loop4: detected capacity change from 0 to 264192 04:31:10 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:11 executing program 5: chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) 04:31:11 executing program 0: chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:31:11 executing program 2: syz_mount_image$vfat(0x0, &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:11 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 105.070176][ T4338] loop1: detected capacity change from 0 to 264192 [ 105.087589][ T4340] loop2: detected capacity change from 0 to 264192 04:31:11 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) 04:31:11 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:11 executing program 0: chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:31:11 executing program 1: chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:11 executing program 5: syz_mount_image$vfat(0x0, &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) [ 105.229416][ T4346] loop4: detected capacity change from 0 to 264192 [ 105.286819][ T4350] loop5: detected capacity change from 0 to 264192 04:31:11 executing program 2: syz_mount_image$vfat(0x0, &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:11 executing program 0: chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:31:11 executing program 5: syz_mount_image$vfat(0x0, &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) 04:31:11 executing program 1: chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:11 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 105.503360][ T4361] loop5: detected capacity change from 0 to 264192 [ 105.512004][ T4364] loop2: detected capacity change from 0 to 264192 04:31:11 executing program 4: chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) 04:31:11 executing program 4: chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) 04:31:11 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:11 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:11 executing program 1: chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:11 executing program 0: syz_mount_image$vfat(0x0, &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:31:11 executing program 5: syz_mount_image$vfat(0x0, &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) [ 105.729816][ T4380] FAT-fs (loop3): bogus number of reserved sectors [ 105.736535][ T4380] FAT-fs (loop3): Can't find a valid FAT filesystem [ 105.749222][ T4384] loop2: detected capacity change from 0 to 264192 [ 105.751538][ T1441] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 105.764682][ T4385] loop0: detected capacity change from 0 to 264192 [ 105.764842][ T1441] Buffer I/O error on dev loop2, logical block 0, async page read [ 105.784642][ T4387] loop5: detected capacity change from 0 to 264192 [ 105.791454][ T1441] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 105.800613][ T1441] Buffer I/O error on dev loop2, logical block 0, async page read [ 105.808511][ T1441] loop2: unable to read partition table 04:31:12 executing program 4: chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) 04:31:12 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) 04:31:12 executing program 0: syz_mount_image$vfat(0x0, &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:31:12 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:12 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 106.054430][ T4398] loop2: detected capacity change from 0 to 264192 [ 106.063644][ T4397] loop5: detected capacity change from 0 to 264192 [ 106.068570][ T4400] loop0: detected capacity change from 0 to 264192 [ 106.075603][ T4402] loop1: detected capacity change from 0 to 264192 04:31:12 executing program 0: syz_mount_image$vfat(0x0, &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:31:12 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:12 executing program 4: syz_mount_image$vfat(0x0, &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) 04:31:12 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:12 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 106.287112][ T4410] loop0: detected capacity change from 0 to 264192 [ 106.290088][ T4288] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 106.302332][ T4412] loop1: detected capacity change from 0 to 264192 [ 106.302734][ T4288] Buffer I/O error on dev loop0, logical block 0, async page read [ 106.306411][ T4415] loop4: detected capacity change from 0 to 264192 [ 106.309665][ T4413] loop2: detected capacity change from 0 to 264192 [ 106.322043][ T4416] FAT-fs (loop3): bogus number of reserved sectors [ 106.336636][ T4416] FAT-fs (loop3): Can't find a valid FAT filesystem 04:31:12 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:31:12 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) 04:31:12 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:12 executing program 4: syz_mount_image$vfat(0x0, &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) [ 106.532398][ T4422] loop5: detected capacity change from 0 to 264192 [ 106.565154][ T4424] loop0: detected capacity change from 0 to 264192 [ 106.568227][ T1441] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 106.580833][ T1441] Buffer I/O error on dev loop0, logical block 0, async page read [ 106.608397][ T1441] loop0: unable to read partition table [ 106.622155][ T4427] loop4: detected capacity change from 0 to 264192 [ 106.637341][ T4428] loop1: detected capacity change from 0 to 264192 04:31:12 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 106.853469][ T4433] loop2: detected capacity change from 0 to 264192 04:31:13 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:13 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) [ 106.953581][ T4436] FAT-fs (loop3): bogus number of reserved sectors [ 106.960195][ T4436] FAT-fs (loop3): Can't find a valid FAT filesystem 04:31:13 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:13 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:31:13 executing program 4: syz_mount_image$vfat(0x0, &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) [ 107.005929][ T4438] loop5: detected capacity change from 0 to 264192 [ 107.084574][ T4442] loop2: detected capacity change from 0 to 264192 [ 107.093802][ T4444] loop4: detected capacity change from 0 to 264192 [ 107.094294][ T4288] loop4: unable to read partition table [ 107.110186][ T4446] loop0: detected capacity change from 0 to 264192 04:31:13 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:13 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 107.292254][ T4450] loop1: detected capacity change from 0 to 264192 [ 107.292407][ T4288] loop1: unable to read partition table [ 107.315518][ T4452] loop2: detected capacity change from 0 to 264192 04:31:13 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) 04:31:13 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:13 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:31:13 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) 04:31:13 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 107.489682][ T4457] loop5: detected capacity change from 0 to 264192 04:31:13 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 107.549107][ T4460] loop0: detected capacity change from 0 to 264192 [ 107.582352][ T4463] loop4: detected capacity change from 0 to 264192 [ 107.625812][ T4466] FAT-fs (loop3): bogus number of reserved sectors [ 107.632394][ T4466] FAT-fs (loop3): Can't find a valid FAT filesystem [ 107.633229][ T4468] loop1: detected capacity change from 0 to 264192 [ 107.639252][ T1921] loop1: unable to read partition table 04:31:13 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) [ 107.769272][ T4474] loop5: detected capacity change from 0 to 264192 04:31:13 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) 04:31:13 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:31:13 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 107.855284][ T4476] loop0: detected capacity change from 0 to 264192 [ 107.864238][ T4478] loop4: detected capacity change from 0 to 264192 04:31:14 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) 04:31:14 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:14 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 108.127931][ T4488] loop1: detected capacity change from 0 to 264192 [ 108.208456][ T4490] FAT-fs (loop3): bogus number of reserved sectors [ 108.215001][ T4490] FAT-fs (loop3): Can't find a valid FAT filesystem 04:31:14 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) 04:31:14 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:31:14 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:14 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) 04:31:14 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 108.335441][ T4493] loop4: detected capacity change from 0 to 264192 [ 108.347314][ T4496] loop0: detected capacity change from 0 to 264192 [ 108.360332][ T4499] FAT-fs (loop3): bogus number of reserved sectors [ 108.367110][ T4499] FAT-fs (loop3): Can't find a valid FAT filesystem 04:31:14 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) 04:31:14 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:14 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) 04:31:14 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:14 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:14 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) [ 108.585784][ T4508] loop4: detected capacity change from 0 to 264192 [ 108.601444][ T4511] loop1: detected capacity change from 0 to 264192 [ 108.612105][ T4513] loop3: detected capacity change from 0 to 264192 [ 108.618546][ T1441] blk_print_req_error: 9 callbacks suppressed [ 108.618557][ T1441] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 108.634004][ T1441] buffer_io_error: 7 callbacks suppressed [ 108.634014][ T1441] Buffer I/O error on dev loop3, logical block 0, async page read [ 108.648651][ T4515] FAT-fs (loop2): bogus number of reserved sectors [ 108.655190][ T4515] FAT-fs (loop2): Can't find a valid FAT filesystem [ 108.668437][ T4513] FAT-fs (loop3): bogus number of reserved sectors [ 108.674998][ T4513] FAT-fs (loop3): Can't find a valid FAT filesystem 04:31:14 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:14 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) 04:31:15 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:15 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) 04:31:15 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:31:15 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) 04:31:15 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:15 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:15 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 109.034865][ T4540] loop3: detected capacity change from 0 to 264192 [ 109.036483][ T4541] FAT-fs (loop2): bogus number of reserved sectors [ 109.048015][ T4541] FAT-fs (loop2): Can't find a valid FAT filesystem [ 109.054895][ T4540] FAT-fs (loop3): bogus number of reserved sectors [ 109.061503][ T4540] FAT-fs (loop3): Can't find a valid FAT filesystem 04:31:15 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) 04:31:15 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) 04:31:15 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:15 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) [ 109.265982][ T4550] FAT-fs (loop5): bogus number of reserved sectors [ 109.272649][ T4550] FAT-fs (loop5): Can't find a valid FAT filesystem [ 109.273790][ T4552] loop3: detected capacity change from 0 to 264192 [ 109.287967][ T4552] FAT-fs (loop3): bogus number of reserved sectors [ 109.294524][ T4552] FAT-fs (loop3): Can't find a valid FAT filesystem 04:31:15 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) 04:31:15 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:31:15 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:15 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:15 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 109.516140][ T4563] FAT-fs (loop0): bogus number of reserved sectors [ 109.517767][ T4561] FAT-fs (loop1): bogus number of reserved sectors [ 109.522767][ T4563] FAT-fs (loop0): Can't find a valid FAT filesystem [ 109.535937][ T4561] FAT-fs (loop1): Can't find a valid FAT filesystem [ 109.541593][ T4562] FAT-fs (loop4): bogus number of reserved sectors [ 109.549241][ T4562] FAT-fs (loop4): Can't find a valid FAT filesystem [ 109.551053][ T4567] loop3: detected capacity change from 0 to 264192 [ 109.558108][ T4566] FAT-fs (loop2): bogus number of reserved sectors [ 109.569008][ T4566] FAT-fs (loop2): Can't find a valid FAT filesystem [ 109.571145][ T4567] FAT-fs (loop3): bogus number of reserved sectors [ 109.582253][ T4567] FAT-fs (loop3): Can't find a valid FAT filesystem 04:31:15 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) 04:31:15 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) 04:31:15 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 109.792782][ T4574] FAT-fs (loop4): bogus number of reserved sectors [ 109.799379][ T4574] FAT-fs (loop4): Can't find a valid FAT filesystem [ 109.809107][ T4575] FAT-fs (loop5): bogus number of reserved sectors [ 109.815636][ T4575] FAT-fs (loop5): Can't find a valid FAT filesystem [ 109.828610][ T4577] FAT-fs (loop1): bogus number of reserved sectors [ 109.835205][ T4577] FAT-fs (loop1): Can't find a valid FAT filesystem 04:31:16 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) [ 109.960580][ T4581] FAT-fs (loop0): bogus number of reserved sectors [ 109.967314][ T4581] FAT-fs (loop0): Can't find a valid FAT filesystem 04:31:16 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:31:16 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) 04:31:16 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) 04:31:16 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:16 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:16 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 110.039343][ T4583] FAT-fs (loop4): bogus number of reserved sectors [ 110.045938][ T4583] FAT-fs (loop4): Can't find a valid FAT filesystem [ 110.057825][ T4585] FAT-fs (loop0): bogus number of reserved sectors [ 110.064353][ T4585] FAT-fs (loop0): Can't find a valid FAT filesystem [ 110.064955][ T4587] FAT-fs (loop5): bogus number of reserved sectors [ 110.077517][ T4587] FAT-fs (loop5): Can't find a valid FAT filesystem [ 110.100153][ T4592] loop3: detected capacity change from 0 to 264192 [ 110.107350][ T4593] FAT-fs (loop2): bogus number of reserved sectors [ 110.108021][ T4591] FAT-fs (loop1): bogus number of reserved sectors [ 110.113887][ T4593] FAT-fs (loop2): Can't find a valid FAT filesystem [ 110.120394][ T4591] FAT-fs (loop1): Can't find a valid FAT filesystem [ 110.121952][ T4592] FAT-fs (loop3): bogus number of reserved sectors [ 110.140170][ T4592] FAT-fs (loop3): Can't find a valid FAT filesystem 04:31:16 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) 04:31:16 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) 04:31:16 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:31:16 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:16 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 110.390852][ T4601] FAT-fs (loop0): bogus number of reserved sectors [ 110.397436][ T4601] FAT-fs (loop0): Can't find a valid FAT filesystem [ 110.404484][ T4602] FAT-fs (loop4): bogus number of reserved sectors [ 110.408645][ T4604] FAT-fs (loop5): bogus number of reserved sectors [ 110.411091][ T4602] FAT-fs (loop4): Can't find a valid FAT filesystem [ 110.417583][ T4604] FAT-fs (loop5): Can't find a valid FAT filesystem [ 110.433618][ T4606] FAT-fs (loop2): bogus number of reserved sectors [ 110.440162][ T4606] FAT-fs (loop2): Can't find a valid FAT filesystem [ 110.446458][ T4608] FAT-fs (loop1): bogus number of reserved sectors [ 110.453390][ T4608] FAT-fs (loop1): Can't find a valid FAT filesystem 04:31:16 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:16 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) [ 110.678863][ T4614] loop3: detected capacity change from 0 to 264192 [ 110.686569][ T4614] FAT-fs (loop3): bogus number of reserved sectors [ 110.693138][ T4614] FAT-fs (loop3): Can't find a valid FAT filesystem [ 110.705225][ T4616] FAT-fs (loop4): bogus number of reserved sectors [ 110.711828][ T4616] FAT-fs (loop4): Can't find a valid FAT filesystem 04:31:16 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:31:16 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) 04:31:17 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:17 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) 04:31:17 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:17 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 110.939388][ T4623] FAT-fs (loop2): bogus number of reserved sectors [ 110.945931][ T4623] FAT-fs (loop2): Can't find a valid FAT filesystem [ 110.955635][ T4625] FAT-fs (loop1): bogus number of reserved sectors [ 110.962322][ T4625] FAT-fs (loop1): Can't find a valid FAT filesystem [ 110.978928][ T4630] loop3: detected capacity change from 0 to 264192 [ 110.986490][ T4629] FAT-fs (loop4): bogus number of reserved sectors [ 110.993076][ T4629] FAT-fs (loop4): Can't find a valid FAT filesystem [ 110.993337][ T4630] FAT-fs (loop3): bogus number of reserved sectors [ 111.006336][ T4630] FAT-fs (loop3): Can't find a valid FAT filesystem 04:31:17 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:31:17 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) 04:31:17 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 111.221718][ T4637] loop5: detected capacity change from 0 to 264192 [ 111.233798][ T4639] FAT-fs (loop0): bogus number of reserved sectors [ 111.234306][ T4640] loop3: detected capacity change from 0 to 264192 [ 111.240367][ T4639] FAT-fs (loop0): Can't find a valid FAT filesystem [ 111.255055][ T4637] FAT-fs (loop5): bogus number of reserved sectors [ 111.261622][ T4637] FAT-fs (loop5): Can't find a valid FAT filesystem [ 111.268765][ T4640] FAT-fs (loop3): bogus number of reserved sectors [ 111.275338][ T4640] FAT-fs (loop3): Can't find a valid FAT filesystem 04:31:17 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:17 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:31:17 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) 04:31:17 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) 04:31:17 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 111.384731][ T4643] loop3: detected capacity change from 0 to 264192 [ 111.409641][ T4645] loop5: detected capacity change from 0 to 264192 [ 111.423393][ T4647] loop0: detected capacity change from 0 to 264192 04:31:17 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 111.425545][ T4649] loop4: detected capacity change from 0 to 264192 [ 111.446484][ T4643] FAT-fs (loop3): bogus number of reserved sectors [ 111.453068][ T4643] FAT-fs (loop3): Can't find a valid FAT filesystem [ 111.462364][ T4649] FAT-fs (loop4): bogus number of reserved sectors [ 111.468920][ T4649] FAT-fs (loop4): Can't find a valid FAT filesystem [ 111.481745][ T4651] FAT-fs (loop1): bogus number of reserved sectors [ 111.488398][ T4651] FAT-fs (loop1): Can't find a valid FAT filesystem [ 111.489176][ T4653] loop2: detected capacity change from 0 to 264192 [ 111.498980][ T4647] FAT-fs (loop0): bogus number of reserved sectors [ 111.502954][ T4645] FAT-fs (loop5): bogus number of reserved sectors [ 111.508053][ T4647] FAT-fs (loop0): Can't find a valid FAT filesystem [ 111.514547][ T4645] FAT-fs (loop5): Can't find a valid FAT filesystem [ 111.521449][ T4653] FAT-fs (loop2): bogus number of reserved sectors [ 111.534278][ T4653] FAT-fs (loop2): Can't find a valid FAT filesystem 04:31:17 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:17 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:31:17 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) 04:31:17 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) [ 111.765433][ T4662] loop4: detected capacity change from 0 to 264192 [ 111.774626][ T4665] loop0: detected capacity change from 0 to 264192 [ 111.780438][ T4663] loop1: detected capacity change from 0 to 264192 [ 111.788332][ T4665] FAT-fs (loop0): bogus number of reserved sectors [ 111.791799][ T4667] loop5: detected capacity change from 0 to 264192 [ 111.794872][ T4665] FAT-fs (loop0): Can't find a valid FAT filesystem [ 111.795767][ T4662] FAT-fs (loop4): bogus number of reserved sectors [ 111.809914][ T4667] FAT-fs (loop5): bogus number of reserved sectors [ 111.814651][ T4662] FAT-fs (loop4): Can't find a valid FAT filesystem [ 111.815652][ T4663] FAT-fs (loop1): bogus number of reserved sectors [ 111.822233][ T4667] FAT-fs (loop5): Can't find a valid FAT filesystem [ 111.828830][ T4663] FAT-fs (loop1): Can't find a valid FAT filesystem 04:31:18 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) 04:31:18 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:31:18 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400", 0xc}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:18 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) 04:31:18 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 112.025664][ T4673] loop4: detected capacity change from 0 to 264192 [ 112.033637][ T4673] FAT-fs (loop4): bogus number of reserved sectors [ 112.040228][ T4673] FAT-fs (loop4): Can't find a valid FAT filesystem [ 112.060225][ T4678] loop2: detected capacity change from 0 to 264192 [ 112.061996][ T1441] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 112.067117][ T4679] loop0: detected capacity change from 0 to 264192 [ 112.075955][ T1441] Buffer I/O error on dev loop2, logical block 0, async page read [ 112.087001][ T4678] FAT-fs (loop2): bogus number of reserved sectors [ 112.092035][ T4680] loop5: detected capacity change from 0 to 264192 [ 112.096845][ T4678] FAT-fs (loop2): Can't find a valid FAT filesystem [ 112.103551][ T4681] loop3: detected capacity change from 0 to 264192 [ 112.121099][ T4679] FAT-fs (loop0): bogus number of reserved sectors [ 112.127745][ T4679] FAT-fs (loop0): Can't find a valid FAT filesystem [ 112.135214][ T4680] FAT-fs (loop5): bogus number of reserved sectors [ 112.141854][ T4680] FAT-fs (loop5): Can't find a valid FAT filesystem [ 112.143019][ T4681] FAT-fs (loop3): bogus number of reserved sectors [ 112.155101][ T4681] FAT-fs (loop3): Can't find a valid FAT filesystem 04:31:18 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:18 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) 04:31:18 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:31:18 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) 04:31:18 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:18 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400", 0xc}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 112.368170][ T4689] loop0: detected capacity change from 0 to 264192 [ 112.383691][ T4692] loop4: detected capacity change from 0 to 264192 [ 112.386326][ T4694] loop5: detected capacity change from 0 to 264192 [ 112.392260][ T4695] loop2: detected capacity change from 0 to 264192 [ 112.405965][ T4696] loop3: detected capacity change from 0 to 264192 [ 112.406242][ T4697] loop1: detected capacity change from 0 to 264192 [ 112.420728][ T4692] FAT-fs (loop4): bogus number of reserved sectors [ 112.427294][ T4692] FAT-fs (loop4): Can't find a valid FAT filesystem [ 112.427482][ T4694] FAT-fs (loop5): bogus number of reserved sectors [ 112.433951][ T4695] FAT-fs (loop2): bogus number of reserved sectors [ 112.440463][ T4694] FAT-fs (loop5): Can't find a valid FAT filesystem [ 112.446932][ T4695] FAT-fs (loop2): Can't find a valid FAT filesystem [ 112.456870][ T4697] FAT-fs (loop1): bogus number of reserved sectors [ 112.466822][ T4697] FAT-fs (loop1): Can't find a valid FAT filesystem [ 112.475052][ T4696] FAT-fs (loop3): bogus number of reserved sectors [ 112.481697][ T4696] FAT-fs (loop3): Can't find a valid FAT filesystem [ 112.488468][ T4689] FAT-fs (loop0): bogus number of reserved sectors [ 112.494987][ T4689] FAT-fs (loop0): Can't find a valid FAT filesystem 04:31:18 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) 04:31:18 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:31:18 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) 04:31:18 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:18 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400", 0xc}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:18 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 112.787008][ T4708] loop4: detected capacity change from 0 to 264192 [ 112.797325][ T4707] loop0: detected capacity change from 0 to 264192 [ 112.803032][ T4710] loop1: detected capacity change from 0 to 264192 [ 112.815789][ T4708] FAT-fs (loop4): bogus number of reserved sectors [ 112.816696][ T4714] loop5: detected capacity change from 0 to 264192 [ 112.822323][ T4708] FAT-fs (loop4): Can't find a valid FAT filesystem [ 112.835837][ T4710] FAT-fs (loop1): bogus number of reserved sectors [ 112.842384][ T4710] FAT-fs (loop1): Can't find a valid FAT filesystem [ 112.849129][ T4713] loop3: detected capacity change from 0 to 264192 [ 112.856963][ T4713] FAT-fs (loop3): bogus number of reserved sectors [ 112.863659][ T4713] FAT-fs (loop3): Can't find a valid FAT filesystem [ 112.868293][ T4716] loop2: detected capacity change from 0 to 264192 [ 112.872247][ T4707] FAT-fs (loop0): bogus number of reserved sectors [ 112.883291][ T4707] FAT-fs (loop0): Can't find a valid FAT filesystem [ 112.891765][ T4714] FAT-fs (loop5): bogus number of reserved sectors [ 112.898324][ T4714] FAT-fs (loop5): Can't find a valid FAT filesystem [ 112.905334][ T4716] FAT-fs (loop2): bogus number of reserved sectors [ 112.911909][ T4716] FAT-fs (loop2): Can't find a valid FAT filesystem 04:31:19 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:31:19 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) 04:31:19 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:19 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) [ 113.053298][ T4724] loop0: detected capacity change from 0 to 264192 [ 113.071677][ T4726] loop5: detected capacity change from 0 to 264192 [ 113.080405][ T4728] loop2: detected capacity change from 0 to 264192 [ 113.090756][ T4730] loop4: detected capacity change from 0 to 264192 [ 113.098901][ T4728] FAT-fs (loop2): bogus number of reserved sectors [ 113.105460][ T4728] FAT-fs (loop2): Can't find a valid FAT filesystem [ 113.109715][ T4724] FAT-fs (loop0): bogus number of reserved sectors [ 113.112145][ T4726] FAT-fs (loop5): bogus number of reserved sectors [ 113.118601][ T4724] FAT-fs (loop0): Can't find a valid FAT filesystem [ 113.131763][ T4726] FAT-fs (loop5): Can't find a valid FAT filesystem [ 113.146231][ T4730] FAT-fs (loop4): bogus number of reserved sectors 04:31:19 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:19 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240", 0x12}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:19 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) [ 113.152814][ T4730] FAT-fs (loop4): Can't find a valid FAT filesystem [ 113.182919][ T4734] loop1: detected capacity change from 0 to 264192 [ 113.183293][ T1441] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 113.198653][ T1441] Buffer I/O error on dev loop1, logical block 0, async page read [ 113.208315][ T4737] loop3: detected capacity change from 0 to 264192 [ 113.209318][ T4739] loop0: detected capacity change from 0 to 264192 [ 113.222011][ T4734] FAT-fs (loop1): bogus number of reserved sectors [ 113.228563][ T4734] FAT-fs (loop1): Can't find a valid FAT filesystem [ 113.236111][ T4737] FAT-fs (loop3): invalid media value (0x00) [ 113.242174][ T4737] FAT-fs (loop3): Can't find a valid FAT filesystem [ 113.253810][ T4739] FAT-fs (loop0): bogus number of reserved sectors [ 113.260433][ T4739] FAT-fs (loop0): Can't find a valid FAT filesystem 04:31:19 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) [ 113.297487][ T4288] I/O error, dev loop1, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 113.318819][ T2297] I/O error, dev loop3, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 04:31:19 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) 04:31:19 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240", 0x12}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:19 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:31:19 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 113.408777][ T4745] loop4: detected capacity change from 0 to 264192 04:31:19 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 113.454768][ T4747] loop5: detected capacity change from 0 to 264192 [ 113.470089][ T4749] loop0: detected capacity change from 0 to 264192 [ 113.478554][ T4747] FAT-fs (loop5): bogus number of reserved sectors [ 113.485111][ T4747] FAT-fs (loop5): Can't find a valid FAT filesystem [ 113.492215][ T4751] loop3: detected capacity change from 0 to 264192 [ 113.498024][ T4753] loop2: detected capacity change from 0 to 264192 [ 113.505619][ T4749] FAT-fs (loop0): bogus number of reserved sectors [ 113.507985][ T4755] loop1: detected capacity change from 0 to 264192 [ 113.512156][ T4749] FAT-fs (loop0): Can't find a valid FAT filesystem [ 113.526248][ T4755] FAT-fs (loop1): bogus number of reserved sectors [ 113.526277][ T4753] FAT-fs (loop2): bogus number of reserved sectors [ 113.532820][ T4755] FAT-fs (loop1): Can't find a valid FAT filesystem [ 113.539298][ T4753] FAT-fs (loop2): Can't find a valid FAT filesystem [ 113.546404][ T4751] FAT-fs (loop3): invalid media value (0x00) [ 113.558633][ T4751] FAT-fs (loop3): Can't find a valid FAT filesystem 04:31:19 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) 04:31:19 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:19 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) 04:31:19 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:19 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) [ 113.728176][ T4762] loop4: detected capacity change from 0 to 264192 [ 113.775082][ T4764] loop0: detected capacity change from 0 to 264192 [ 113.785408][ T4764] FAT-fs (loop0): bogus number of reserved sectors [ 113.792011][ T4764] FAT-fs (loop0): Can't find a valid FAT filesystem [ 113.795815][ T4769] loop2: detected capacity change from 0 to 264192 [ 113.799010][ T4766] loop5: detected capacity change from 0 to 264192 [ 113.811863][ T4769] FAT-fs (loop2): bogus number of reserved sectors [ 113.811864][ T4770] loop1: detected capacity change from 0 to 264192 [ 113.819229][ T4770] FAT-fs (loop1): bogus number of reserved sectors [ 113.824928][ T4769] FAT-fs (loop2): Can't find a valid FAT filesystem [ 113.833179][ T4766] FAT-fs (loop5): bogus number of reserved sectors [ 113.838254][ T4770] FAT-fs (loop1): Can't find a valid FAT filesystem [ 113.844736][ T4766] FAT-fs (loop5): Can't find a valid FAT filesystem 04:31:20 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:20 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) 04:31:20 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400", 0xc}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:31:20 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240", 0x12}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:20 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400", 0xc}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) 04:31:20 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 114.039954][ T4777] loop4: detected capacity change from 0 to 264192 [ 114.049991][ T4778] loop0: detected capacity change from 0 to 264192 [ 114.062361][ T4780] loop5: detected capacity change from 0 to 264192 [ 114.069481][ T4782] loop1: detected capacity change from 0 to 264192 [ 114.071541][ T4784] loop2: detected capacity change from 0 to 264192 [ 114.080326][ T1441] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 114.091792][ T1441] Buffer I/O error on dev loop2, logical block 0, async page read [ 114.092920][ T4778] FAT-fs (loop0): bogus number of reserved sectors [ 114.106182][ T4778] FAT-fs (loop0): Can't find a valid FAT filesystem [ 114.107390][ T4782] FAT-fs (loop1): bogus number of reserved sectors [ 114.119306][ T4782] FAT-fs (loop1): Can't find a valid FAT filesystem [ 114.126276][ T4786] loop3: detected capacity change from 0 to 264192 [ 114.132802][ T4780] FAT-fs (loop5): bogus number of reserved sectors [ 114.139320][ T4780] FAT-fs (loop5): Can't find a valid FAT filesystem [ 114.142959][ T4777] FAT-fs (loop4): bogus number of reserved sectors [ 114.152586][ T4777] FAT-fs (loop4): Can't find a valid FAT filesystem [ 114.160866][ T4784] FAT-fs (loop2): bogus number of reserved sectors [ 114.167430][ T4784] FAT-fs (loop2): Can't find a valid FAT filesystem [ 114.167962][ T4786] FAT-fs (loop3): invalid media value (0x00) [ 114.180199][ T4786] FAT-fs (loop3): Can't find a valid FAT filesystem 04:31:20 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000", 0x15}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:20 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400", 0xc}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) 04:31:20 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400", 0xc}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) [ 114.338792][ T4794] loop3: detected capacity change from 0 to 264192 [ 114.342536][ T4798] loop5: detected capacity change from 0 to 264192 [ 114.345610][ T4797] loop0: detected capacity change from 0 to 264192 [ 114.358654][ T4794] FAT-fs (loop3): invalid media value (0x00) [ 114.364697][ T4794] FAT-fs (loop3): Can't find a valid FAT filesystem [ 114.365025][ T4797] FAT-fs (loop0): bogus number of reserved sectors [ 114.377881][ T4797] FAT-fs (loop0): Can't find a valid FAT filesystem [ 114.378349][ T4798] FAT-fs (loop5): bogus number of reserved sectors [ 114.391084][ T4798] FAT-fs (loop5): Can't find a valid FAT filesystem 04:31:20 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400", 0xc}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:31:20 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:20 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:20 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000", 0x15}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:20 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400", 0xc}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) [ 114.527207][ T4803] loop0: detected capacity change from 0 to 264192 [ 114.551046][ T4807] loop1: detected capacity change from 0 to 264192 [ 114.556209][ T4805] loop3: detected capacity change from 0 to 264192 [ 114.557785][ T4809] loop2: detected capacity change from 0 to 264192 [ 114.570719][ T4803] FAT-fs (loop0): bogus number of reserved sectors 04:31:20 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400", 0xc}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) [ 114.577306][ T4803] FAT-fs (loop0): Can't find a valid FAT filesystem [ 114.584187][ T4811] loop4: detected capacity change from 0 to 264192 [ 114.595102][ T4807] FAT-fs (loop1): bogus number of reserved sectors [ 114.601671][ T4807] FAT-fs (loop1): Can't find a valid FAT filesystem [ 114.608374][ T4805] FAT-fs (loop3): invalid media value (0x00) [ 114.614476][ T4805] FAT-fs (loop3): Can't find a valid FAT filesystem [ 114.615987][ T4811] FAT-fs (loop4): bogus number of reserved sectors [ 114.621281][ T4813] loop5: detected capacity change from 0 to 264192 [ 114.627613][ T4811] FAT-fs (loop4): Can't find a valid FAT filesystem [ 114.629927][ T4809] FAT-fs (loop2): bogus number of reserved sectors [ 114.647321][ T4809] FAT-fs (loop2): Can't find a valid FAT filesystem [ 114.654403][ T4813] FAT-fs (loop5): bogus number of reserved sectors [ 114.661051][ T4813] FAT-fs (loop5): Can't find a valid FAT filesystem 04:31:20 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400", 0xc}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:20 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240", 0x12}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) [ 114.829180][ T4821] loop2: detected capacity change from 0 to 264192 [ 114.842109][ T4821] FAT-fs (loop2): bogus number of reserved sectors [ 114.844262][ T4823] loop5: detected capacity change from 0 to 264192 [ 114.848780][ T4821] FAT-fs (loop2): Can't find a valid FAT filesystem [ 114.863421][ T4823] FAT-fs (loop5): invalid media value (0x00) [ 114.869612][ T4823] FAT-fs (loop5): Can't find a valid FAT filesystem 04:31:21 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240", 0x12}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:31:21 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400", 0xc}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) 04:31:21 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:21 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240", 0x12}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) 04:31:21 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000", 0x15}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 115.067381][ T4828] loop3: detected capacity change from 0 to 264192 [ 115.075873][ T4830] loop5: detected capacity change from 0 to 264192 [ 115.089922][ T4828] FAT-fs (loop3): invalid media value (0x00) [ 115.095994][ T4828] FAT-fs (loop3): Can't find a valid FAT filesystem [ 115.102218][ T4834] loop0: detected capacity change from 0 to 264192 [ 115.102853][ T4832] loop4: detected capacity change from 0 to 264192 [ 115.110774][ T4835] loop1: detected capacity change from 0 to 264192 [ 115.115905][ T1921] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 115.131386][ T1921] Buffer I/O error on dev loop1, logical block 0, async page read [ 115.134185][ T4834] FAT-fs (loop0): invalid media value (0x00) [ 115.145205][ T4834] FAT-fs (loop0): Can't find a valid FAT filesystem [ 115.145966][ T4830] FAT-fs (loop5): invalid media value (0x00) [ 115.155199][ T4832] FAT-fs (loop4): bogus number of reserved sectors [ 115.157830][ T4830] FAT-fs (loop5): Can't find a valid FAT filesystem [ 115.164298][ T4832] FAT-fs (loop4): Can't find a valid FAT filesystem [ 115.180676][ T4835] FAT-fs (loop1): bogus number of reserved sectors [ 115.187238][ T4835] FAT-fs (loop1): Can't find a valid FAT filesystem 04:31:21 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400", 0xc}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) 04:31:21 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400", 0xc}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:21 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240", 0x12}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) 04:31:21 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240", 0x12}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) [ 115.377369][ T4843] loop5: detected capacity change from 0 to 264192 [ 115.380632][ T4845] loop4: detected capacity change from 0 to 264192 [ 115.396999][ T4847] loop2: detected capacity change from 0 to 264192 [ 115.397039][ T4845] FAT-fs (loop4): bogus number of reserved sectors [ 115.410107][ T4845] FAT-fs (loop4): Can't find a valid FAT filesystem [ 115.417062][ T4848] loop0: detected capacity change from 0 to 264192 [ 115.425079][ T4848] FAT-fs (loop0): invalid media value (0x00) [ 115.431130][ T4848] FAT-fs (loop0): Can't find a valid FAT filesystem [ 115.431493][ T4843] FAT-fs (loop5): invalid media value (0x00) [ 115.443810][ T4843] FAT-fs (loop5): Can't find a valid FAT filesystem [ 115.445530][ T4847] FAT-fs (loop2): bogus number of reserved sectors [ 115.456977][ T4847] FAT-fs (loop2): Can't find a valid FAT filesystem 04:31:21 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f8", 0x16}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:21 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000", 0x15}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) 04:31:21 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240", 0x12}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) 04:31:21 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400", 0xc}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:21 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240", 0x12}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) [ 115.723481][ T4855] loop5: detected capacity change from 0 to 264192 [ 115.723527][ T4856] loop3: detected capacity change from 0 to 264192 [ 115.743257][ T4855] FAT-fs (loop5): invalid media value (0x00) [ 115.743768][ T4858] loop4: detected capacity change from 0 to 264192 [ 115.749316][ T4855] FAT-fs (loop5): Can't find a valid FAT filesystem [ 115.764740][ T4861] loop0: detected capacity change from 0 to 264192 [ 115.771541][ T4862] loop1: detected capacity change from 0 to 264192 [ 115.779339][ T4856] FAT-fs (loop3): bogus number of FAT sectors [ 115.785502][ T4856] FAT-fs (loop3): Can't find a valid FAT filesystem [ 115.793897][ T4862] FAT-fs (loop1): bogus number of reserved sectors [ 115.800492][ T4862] FAT-fs (loop1): Can't find a valid FAT filesystem [ 115.807511][ T4861] FAT-fs (loop0): invalid media value (0x00) [ 115.813519][ T4861] FAT-fs (loop0): Can't find a valid FAT filesystem [ 115.824195][ T4858] FAT-fs (loop4): invalid media value (0x00) [ 115.830229][ T4858] FAT-fs (loop4): Can't find a valid FAT filesystem 04:31:22 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400", 0xc}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 116.036170][ T4869] loop2: detected capacity change from 0 to 264192 [ 116.061543][ T4869] FAT-fs (loop2): bogus number of reserved sectors [ 116.068213][ T4869] FAT-fs (loop2): Can't find a valid FAT filesystem 04:31:22 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000", 0x15}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:31:22 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240", 0x12}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:22 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240", 0x12}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) 04:31:22 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000", 0x15}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) 04:31:22 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400", 0xc}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:22 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f8", 0x16}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 116.158109][ T4873] loop0: detected capacity change from 0 to 264192 [ 116.160526][ T4872] loop2: detected capacity change from 0 to 264192 [ 116.164848][ T4875] loop5: detected capacity change from 0 to 264192 [ 116.175632][ T4872] FAT-fs (loop2): invalid media value (0x00) [ 116.183697][ T4872] FAT-fs (loop2): Can't find a valid FAT filesystem [ 116.207926][ T4879] loop1: detected capacity change from 0 to 264192 [ 116.216927][ T4879] FAT-fs (loop1): bogus number of reserved sectors [ 116.223467][ T4879] FAT-fs (loop1): Can't find a valid FAT filesystem [ 116.223475][ T4881] loop4: detected capacity change from 0 to 264192 [ 116.231007][ T4877] loop3: detected capacity change from 0 to 264192 [ 116.243753][ T4873] FAT-fs (loop0): invalid media value (0x00) [ 116.249816][ T4873] FAT-fs (loop0): Can't find a valid FAT filesystem [ 116.256436][ T4881] FAT-fs (loop4): invalid media value (0x00) [ 116.258060][ T4877] FAT-fs (loop3): bogus number of FAT sectors [ 116.262426][ T4881] FAT-fs (loop4): Can't find a valid FAT filesystem [ 116.275102][ T4877] FAT-fs (loop3): Can't find a valid FAT filesystem [ 116.293681][ T4875] FAT-fs (loop5): invalid media value (0x00) [ 116.299757][ T4875] FAT-fs (loop5): Can't find a valid FAT filesystem 04:31:22 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000", 0x15}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) 04:31:22 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400", 0xc}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:22 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240", 0x12}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) 04:31:22 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000", 0x15}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:31:22 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240", 0x12}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 116.453517][ T4890] loop5: detected capacity change from 0 to 264192 04:31:22 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f8", 0x16}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 116.494459][ T4893] loop0: detected capacity change from 0 to 264192 [ 116.514648][ T4894] loop4: detected capacity change from 0 to 264192 [ 116.526286][ T4897] loop2: detected capacity change from 0 to 264192 [ 116.530503][ T4898] loop1: detected capacity change from 0 to 264192 [ 116.539067][ T4900] loop3: detected capacity change from 0 to 264192 [ 116.545973][ T4893] FAT-fs (loop0): invalid media value (0x00) [ 116.552005][ T4893] FAT-fs (loop0): Can't find a valid FAT filesystem [ 116.552300][ T4898] FAT-fs (loop1): bogus number of reserved sectors [ 116.565245][ T4898] FAT-fs (loop1): Can't find a valid FAT filesystem [ 116.565900][ T4894] FAT-fs (loop4): invalid media value (0x00) [ 116.573684][ T4897] FAT-fs (loop2): invalid media value (0x00) [ 116.577880][ T4894] FAT-fs (loop4): Can't find a valid FAT filesystem [ 116.578150][ T4900] FAT-fs (loop3): bogus number of FAT sectors [ 116.583892][ T4897] FAT-fs (loop2): Can't find a valid FAT filesystem [ 116.603263][ T4900] FAT-fs (loop3): Can't find a valid FAT filesystem 04:31:22 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000", 0x15}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) 04:31:22 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f8", 0x16}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) 04:31:22 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240", 0x12}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:22 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000", 0x15}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:31:22 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:22 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240", 0x12}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 116.839698][ T4909] loop5: detected capacity change from 0 to 264192 [ 116.843283][ T4910] loop4: detected capacity change from 0 to 264192 [ 116.860591][ T4910] FAT-fs (loop4): invalid media value (0x00) [ 116.866614][ T4910] FAT-fs (loop4): Can't find a valid FAT filesystem [ 116.880342][ T4912] loop0: detected capacity change from 0 to 264192 [ 116.887288][ T4914] loop2: detected capacity change from 0 to 264192 [ 116.893846][ T4909] FAT-fs (loop5): bogus number of FAT sectors [ 116.900088][ T4909] FAT-fs (loop5): Can't find a valid FAT filesystem [ 116.900273][ T4912] FAT-fs (loop0): invalid media value (0x00) [ 116.909182][ T4917] loop1: detected capacity change from 0 to 264192 [ 116.912715][ T4912] FAT-fs (loop0): Can't find a valid FAT filesystem [ 116.921633][ T4918] loop3: detected capacity change from 0 to 264192 [ 116.932692][ T4914] FAT-fs (loop2): invalid media value (0x00) [ 116.938781][ T4914] FAT-fs (loop2): Can't find a valid FAT filesystem [ 116.941804][ T4917] FAT-fs (loop1): invalid media value (0x00) [ 116.951544][ T4917] FAT-fs (loop1): Can't find a valid FAT filesystem 04:31:23 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 117.063323][ T4925] loop3: detected capacity change from 0 to 264192 04:31:23 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 117.184233][ T4929] loop3: detected capacity change from 0 to 264192 04:31:23 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000", 0x15}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) 04:31:23 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f8", 0x16}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:31:23 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f8", 0x16}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) 04:31:23 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000", 0x15}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:23 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 117.257852][ T4931] loop0: detected capacity change from 0 to 264192 [ 117.271141][ T4931] FAT-fs (loop0): bogus number of FAT sectors [ 117.277373][ T4931] FAT-fs (loop0): Can't find a valid FAT filesystem [ 117.286023][ T4934] loop5: detected capacity change from 0 to 264192 [ 117.289130][ T4936] loop4: detected capacity change from 0 to 264192 [ 117.312167][ T4936] FAT-fs (loop4): invalid media value (0x00) [ 117.318215][ T4936] FAT-fs (loop4): Can't find a valid FAT filesystem [ 117.319348][ T4934] FAT-fs (loop5): bogus number of FAT sectors [ 117.325311][ T4938] loop2: detected capacity change from 0 to 264192 [ 117.330913][ T4934] FAT-fs (loop5): Can't find a valid FAT filesystem [ 117.345353][ T4938] FAT-fs (loop2): invalid media value (0x00) [ 117.348903][ T4940] loop3: detected capacity change from 0 to 264192 04:31:23 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240", 0x12}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 117.351392][ T4938] FAT-fs (loop2): Can't find a valid FAT filesystem [ 117.389827][ T4944] loop1: detected capacity change from 0 to 264192 [ 117.407696][ T4944] FAT-fs (loop1): invalid media value (0x00) [ 117.413726][ T4944] FAT-fs (loop1): Can't find a valid FAT filesystem 04:31:23 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f8", 0x16}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:31:23 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000", 0x15}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) 04:31:23 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240", 0x12}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:23 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f8", 0x16}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) [ 117.569441][ T4949] loop0: detected capacity change from 0 to 264192 [ 117.584252][ T4949] FAT-fs (loop0): bogus number of FAT sectors [ 117.590424][ T4949] FAT-fs (loop0): Can't find a valid FAT filesystem 04:31:23 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000", 0x15}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:23 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 117.645125][ T4951] loop1: detected capacity change from 0 to 264192 [ 117.667150][ T4953] loop2: detected capacity change from 0 to 264192 [ 117.678623][ T4951] FAT-fs (loop1): invalid media value (0x00) [ 117.684631][ T4951] FAT-fs (loop1): Can't find a valid FAT filesystem [ 117.691090][ T4956] loop5: detected capacity change from 0 to 264192 [ 117.695193][ T4957] loop4: detected capacity change from 0 to 264192 [ 117.709341][ T4957] FAT-fs (loop4): invalid media value (0x00) [ 117.715363][ T4957] FAT-fs (loop4): Can't find a valid FAT filesystem [ 117.722173][ T4953] FAT-fs (loop2): invalid media value (0x00) [ 117.728579][ T4953] FAT-fs (loop2): Can't find a valid FAT filesystem [ 117.729091][ T4956] FAT-fs (loop5): bogus number of FAT sectors [ 117.741362][ T4956] FAT-fs (loop5): Can't find a valid FAT filesystem [ 117.762256][ T4961] loop3: detected capacity change from 0 to 264192 [ 117.764067][ T4288] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 117.777974][ T4288] Buffer I/O error on dev loop3, logical block 0, async page read 04:31:23 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000", 0x15}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 117.920841][ T4966] loop1: detected capacity change from 0 to 264192 [ 117.935644][ T4966] FAT-fs (loop1): invalid media value (0x00) [ 117.941700][ T4966] FAT-fs (loop1): Can't find a valid FAT filesystem 04:31:24 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f8", 0x16}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:31:24 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f8", 0x16}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) 04:31:24 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000", 0x15}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:24 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) 04:31:24 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000", 0x15}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:24 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 118.179923][ T4970] loop0: detected capacity change from 0 to 264192 [ 118.183037][ T4971] loop4: detected capacity change from 0 to 264192 [ 118.212005][ T4973] loop5: detected capacity change from 0 to 264192 [ 118.218710][ T4975] loop1: detected capacity change from 0 to 264192 [ 118.225393][ T4970] FAT-fs (loop0): bogus number of FAT sectors [ 118.231574][ T4970] FAT-fs (loop0): Can't find a valid FAT filesystem [ 118.238553][ T4977] loop2: detected capacity change from 0 to 264192 [ 118.239935][ T4971] FAT-fs (loop4): bogus number of FAT sectors [ 118.251221][ T4971] FAT-fs (loop4): Can't find a valid FAT filesystem [ 118.251385][ T4977] FAT-fs (loop2): invalid media value (0x00) [ 118.263876][ T4977] FAT-fs (loop2): Can't find a valid FAT filesystem [ 118.271205][ T4975] FAT-fs (loop1): invalid media value (0x00) [ 118.277241][ T4975] FAT-fs (loop1): Can't find a valid FAT filesystem [ 118.290828][ T4981] loop3: detected capacity change from 0 to 264192 04:31:24 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) [ 118.418888][ T4987] loop5: detected capacity change from 0 to 264192 04:31:24 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:31:24 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f8", 0x16}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) 04:31:24 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) 04:31:24 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 118.617968][ T4990] loop0: detected capacity change from 0 to 264192 [ 118.628947][ T4992] loop5: detected capacity change from 0 to 264192 [ 118.668070][ T4994] loop4: detected capacity change from 0 to 264192 [ 118.674173][ T4996] loop3: detected capacity change from 0 to 264192 [ 118.697601][ T4994] FAT-fs (loop4): bogus number of FAT sectors [ 118.703782][ T4994] FAT-fs (loop4): Can't find a valid FAT filesystem 04:31:24 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:24 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f8", 0x16}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:24 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) [ 118.790708][ T5001] loop3: detected capacity change from 0 to 264192 [ 118.794856][ T4288] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 118.806503][ T4288] Buffer I/O error on dev loop3, logical block 0, async page read 04:31:25 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000", 0x15}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:25 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f8", 0x16}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) 04:31:25 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) [ 118.861162][ T5004] loop5: detected capacity change from 0 to 264192 [ 118.869171][ T5005] loop2: detected capacity change from 0 to 264192 [ 118.879497][ T5005] FAT-fs (loop2): bogus number of FAT sectors [ 118.885591][ T5005] FAT-fs (loop2): Can't find a valid FAT filesystem [ 118.936367][ T5010] loop4: detected capacity change from 0 to 264192 [ 118.945476][ T5011] loop0: detected capacity change from 0 to 264192 [ 118.956908][ T5010] FAT-fs (loop4): bogus number of FAT sectors [ 118.963005][ T5010] FAT-fs (loop4): Can't find a valid FAT filesystem [ 118.976313][ T5014] loop1: detected capacity change from 0 to 264192 [ 118.995762][ T5014] FAT-fs (loop1): invalid media value (0x00) [ 119.001796][ T5014] FAT-fs (loop1): Can't find a valid FAT filesystem 04:31:25 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:31:25 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) 04:31:25 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) [ 119.165593][ T5019] loop0: detected capacity change from 0 to 264192 04:31:25 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:25 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f8", 0x16}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:25 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) 04:31:25 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f8", 0x16}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 119.229809][ T5023] loop5: detected capacity change from 0 to 264192 [ 119.258764][ T5025] loop4: detected capacity change from 0 to 264192 [ 119.266183][ T5027] loop2: detected capacity change from 0 to 264192 [ 119.277140][ T5029] loop1: detected capacity change from 0 to 264192 [ 119.284139][ T5027] FAT-fs (loop2): bogus number of FAT sectors [ 119.290280][ T5027] FAT-fs (loop2): Can't find a valid FAT filesystem [ 119.291859][ T5029] FAT-fs (loop1): bogus number of FAT sectors [ 119.303038][ T5029] FAT-fs (loop1): Can't find a valid FAT filesystem [ 119.323363][ T5032] loop3: detected capacity change from 0 to 264192 04:31:25 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) [ 119.453930][ T5038] loop4: detected capacity change from 0 to 264192 04:31:25 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) 04:31:25 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(0x0, 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 119.600603][ T5040] loop4: detected capacity change from 0 to 264192 04:31:25 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) [ 119.652265][ T5042] loop3: detected capacity change from 0 to 264192 04:31:25 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) 04:31:25 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(0x0, 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 119.730091][ T5044] loop0: detected capacity change from 0 to 264192 [ 119.795275][ T5046] loop5: detected capacity change from 0 to 264192 [ 119.813607][ T5049] loop3: detected capacity change from 0 to 264192 04:31:25 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f8", 0x16}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:25 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f8", 0x16}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:26 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(0x0, 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 119.881041][ T5051] loop2: detected capacity change from 0 to 264192 [ 119.898775][ T5051] FAT-fs (loop2): bogus number of FAT sectors [ 119.904907][ T5051] FAT-fs (loop2): Can't find a valid FAT filesystem [ 119.907686][ T5054] loop1: detected capacity change from 0 to 264192 [ 119.911702][ T4288] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 119.927222][ T4288] Buffer I/O error on dev loop1, logical block 0, async page read [ 119.936374][ T5054] FAT-fs (loop1): bogus number of FAT sectors [ 119.942557][ T5054] FAT-fs (loop1): Can't find a valid FAT filesystem [ 119.957440][ T5056] loop3: detected capacity change from 0 to 264192 04:31:26 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) 04:31:26 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:26 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) [ 120.117608][ T5060] loop3: detected capacity change from 0 to 264192 [ 120.141050][ T5062] loop4: detected capacity change from 0 to 264192 04:31:26 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:26 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) 04:31:26 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:31:26 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f8", 0x16}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 120.241956][ T5064] loop2: detected capacity change from 0 to 264192 [ 120.245857][ T5066] loop1: detected capacity change from 0 to 264192 [ 120.253458][ T5068] loop5: detected capacity change from 0 to 264192 [ 120.263297][ T5070] loop0: detected capacity change from 0 to 264192 [ 120.264123][ T1441] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 120.278959][ T1441] Buffer I/O error on dev loop0, logical block 0, async page read [ 120.287055][ T5066] FAT-fs (loop1): bogus number of FAT sectors [ 120.287292][ T5072] loop4: detected capacity change from 0 to 264192 [ 120.293222][ T5066] FAT-fs (loop1): Can't find a valid FAT filesystem 04:31:26 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:26 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 120.403098][ T5078] loop3: detected capacity change from 0 to 264192 [ 120.426556][ T5080] loop2: detected capacity change from 0 to 264192 04:31:26 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:26 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 120.547582][ T5083] loop3: detected capacity change from 0 to 264192 [ 120.575900][ T5085] loop2: detected capacity change from 0 to 264192 04:31:26 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:26 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:26 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) [ 120.696435][ T5088] loop3: detected capacity change from 0 to 264192 [ 120.723208][ T5090] loop2: detected capacity change from 0 to 264192 04:31:26 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:31:26 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 120.788305][ T5092] loop4: detected capacity change from 0 to 264192 04:31:26 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) 04:31:27 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) [ 120.850261][ T5095] loop0: detected capacity change from 0 to 264192 [ 120.855408][ T5097] loop3: detected capacity change from 0 to 264192 [ 120.876954][ T5099] loop5: detected capacity change from 0 to 264192 04:31:27 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:27 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:31:27 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(0x0, 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) [ 120.963265][ T5104] loop4: detected capacity change from 0 to 264192 [ 120.964604][ T1441] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 120.978978][ T1441] Buffer I/O error on dev loop4, logical block 0, async page read 04:31:27 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 121.003705][ T5106] loop1: detected capacity change from 0 to 264192 [ 121.018785][ T5108] loop5: detected capacity change from 0 to 264192 [ 121.023906][ T1441] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 121.034477][ T1441] Buffer I/O error on dev loop5, logical block 0, async page read 04:31:27 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(0x0, 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) [ 121.057816][ T5111] loop3: detected capacity change from 0 to 264192 04:31:27 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 121.141424][ T5114] loop5: detected capacity change from 0 to 264192 [ 121.141674][ T1921] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 121.157112][ T1921] Buffer I/O error on dev loop5, logical block 0, async page read [ 121.227322][ T5116] loop1: detected capacity change from 0 to 264192 04:31:27 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:27 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:27 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:27 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(0x0, 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) 04:31:27 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) [ 121.352896][ T5120] loop5: detected capacity change from 0 to 264192 [ 121.353611][ T5121] loop3: detected capacity change from 0 to 264192 [ 121.376623][ T5125] loop1: detected capacity change from 0 to 264192 04:31:27 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(0x0, 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) 04:31:27 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) [ 121.458788][ T5128] loop5: detected capacity change from 0 to 264192 04:31:27 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:27 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 121.500256][ T5131] loop0: detected capacity change from 0 to 264192 04:31:27 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) [ 121.544537][ T5134] loop1: detected capacity change from 0 to 264192 [ 121.546299][ T5136] loop4: detected capacity change from 0 to 264192 [ 121.555023][ T5137] loop3: detected capacity change from 0 to 264192 [ 121.576484][ T5139] loop5: detected capacity change from 0 to 264192 04:31:27 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(0x0, 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) 04:31:27 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) [ 121.684065][ T5145] loop5: detected capacity change from 0 to 264192 04:31:27 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:27 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(0x0, 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) 04:31:27 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) 04:31:27 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:27 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) [ 121.803742][ T5148] loop4: detected capacity change from 0 to 264192 [ 121.810645][ T5150] loop5: detected capacity change from 0 to 264192 [ 121.818420][ T5153] loop2: detected capacity change from 0 to 264192 [ 121.823620][ T1441] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 121.825147][ T5154] loop3: detected capacity change from 0 to 264192 [ 121.834114][ T1441] Buffer I/O error on dev loop2, logical block 0, async page read 04:31:27 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:27 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) 04:31:27 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) [ 121.849276][ T5155] loop0: detected capacity change from 0 to 264192 04:31:28 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 121.893522][ T5157] loop4: detected capacity change from 0 to 264192 [ 121.905035][ T5160] loop1: detected capacity change from 0 to 264192 [ 121.919872][ T5162] loop5: detected capacity change from 0 to 264192 [ 121.921005][ T1441] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 121.935631][ T1441] Buffer I/O error on dev loop5, logical block 0, async page read 04:31:28 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) 04:31:28 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) 04:31:28 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) [ 121.986194][ T5165] loop3: detected capacity change from 0 to 264192 [ 122.003255][ T5168] loop4: detected capacity change from 0 to 264192 [ 122.013123][ T5170] loop5: detected capacity change from 0 to 264192 [ 122.092243][ T5172] loop4: detected capacity change from 0 to 264192 [ 122.093351][ T1441] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 122.108073][ T1441] Buffer I/O error on dev loop4, logical block 0, async page read 04:31:28 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:28 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:28 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) 04:31:28 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) 04:31:28 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(0x0, 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:31:28 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:28 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) [ 122.208449][ T5175] loop4: detected capacity change from 0 to 264192 [ 122.215335][ T5177] loop5: detected capacity change from 0 to 264192 [ 122.215402][ T5178] loop3: detected capacity change from 0 to 264192 [ 122.225643][ T5180] loop0: detected capacity change from 0 to 264192 [ 122.233544][ T1920] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 122.244195][ T1920] Buffer I/O error on dev loop0, logical block 0, async page read 04:31:28 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(0x0, 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:31:28 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) [ 122.297466][ T5184] loop1: detected capacity change from 0 to 264192 [ 122.323349][ T5186] loop4: detected capacity change from 0 to 264192 04:31:28 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(0x0, 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:31:28 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) 04:31:28 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 122.367867][ T5191] loop5: detected capacity change from 0 to 264192 [ 122.403564][ T5194] loop0: detected capacity change from 0 to 264192 [ 122.473760][ T5196] loop4: detected capacity change from 0 to 264192 [ 122.502673][ T5198] loop3: detected capacity change from 0 to 264192 04:31:28 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:28 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:31:28 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) 04:31:28 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) 04:31:28 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(0x0, 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:28 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:28 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) [ 122.594297][ T5201] loop5: detected capacity change from 0 to 264192 [ 122.605495][ T5203] loop4: detected capacity change from 0 to 264192 [ 122.606180][ T5204] loop0: detected capacity change from 0 to 264192 [ 122.624043][ T5206] loop2: detected capacity change from 0 to 264192 04:31:28 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) [ 122.643550][ T5208] loop3: detected capacity change from 0 to 264192 [ 122.676859][ T5210] loop5: detected capacity change from 0 to 264192 04:31:28 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) 04:31:28 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) [ 122.688827][ T5212] loop0: detected capacity change from 0 to 264192 [ 122.693341][ T5214] loop1: detected capacity change from 0 to 264192 [ 122.695640][ T2297] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 122.711032][ T2297] Buffer I/O error on dev loop1, logical block 0, async page read 04:31:28 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) 04:31:28 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) [ 122.819630][ T5221] loop4: detected capacity change from 0 to 264192 04:31:29 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:29 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:31:29 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) 04:31:29 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) 04:31:29 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(0x0, 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:29 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 122.932773][ T5227] loop5: detected capacity change from 0 to 264192 [ 122.935077][ T5230] loop3: detected capacity change from 0 to 264192 [ 122.941346][ T5231] loop0: detected capacity change from 0 to 264192 [ 122.946879][ T5232] loop4: detected capacity change from 0 to 264192 [ 122.965351][ T5234] loop1: detected capacity change from 0 to 264192 04:31:29 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(0x0, 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) 04:31:29 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:31:29 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) [ 123.010168][ T5236] loop2: detected capacity change from 0 to 264192 [ 123.042948][ T5238] loop0: detected capacity change from 0 to 264192 [ 123.047918][ T5240] loop5: detected capacity change from 0 to 264192 04:31:29 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(0x0, 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) [ 123.081235][ T5243] loop4: detected capacity change from 0 to 264192 [ 123.084963][ T1441] loop4: unable to read partition table 04:31:29 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(0x0, 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:29 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) [ 123.153693][ T5247] loop5: detected capacity change from 0 to 264192 [ 123.186416][ T5249] loop4: detected capacity change from 0 to 264192 [ 123.209832][ T5251] loop3: detected capacity change from 0 to 264192 04:31:29 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(0x0, 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:29 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:31:29 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(0x0, 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) 04:31:29 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(0x0, 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) 04:31:29 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:29 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(0x0, 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) [ 123.305808][ T5255] loop5: detected capacity change from 0 to 264192 [ 123.305989][ T5256] loop4: detected capacity change from 0 to 264192 [ 123.314445][ T5257] loop0: detected capacity change from 0 to 264192 04:31:29 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:29 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:31:29 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) [ 123.357815][ T5261] loop1: detected capacity change from 0 to 264192 [ 123.360811][ T5259] loop2: detected capacity change from 0 to 264192 [ 123.383848][ T5264] loop4: detected capacity change from 0 to 264192 [ 123.383899][ T5265] loop0: detected capacity change from 0 to 264192 04:31:29 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(0x0, 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) [ 123.415611][ T5268] loop3: detected capacity change from 0 to 264192 [ 123.421008][ T1441] loop3: unable to read partition table [ 123.443601][ T5269] loop5: detected capacity change from 0 to 264192 [ 123.447006][ T1441] loop5: unable to read partition table 04:31:29 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:31:29 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(0x0, 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:29 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) [ 123.477023][ T5271] loop4: detected capacity change from 0 to 264192 [ 123.510582][ T5275] loop0: detected capacity change from 0 to 264192 [ 123.534109][ T5278] loop2: detected capacity change from 0 to 264192 04:31:29 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:31:29 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 123.583689][ T5280] loop4: detected capacity change from 0 to 264192 [ 123.621395][ T5283] loop0: detected capacity change from 0 to 264192 04:31:29 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(0x0, 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 123.710697][ T5287] loop3: detected capacity change from 0 to 264192 [ 123.713264][ T4288] loop3: unable to read partition table [ 123.792572][ T5289] loop2: detected capacity change from 0 to 264192 04:31:30 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(0x0, 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:30 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:31:30 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) 04:31:30 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) 04:31:30 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:30 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 123.999082][ T5295] loop3: detected capacity change from 0 to 264192 [ 123.999088][ T5296] loop4: detected capacity change from 0 to 264192 [ 124.000380][ T5297] loop0: detected capacity change from 0 to 264192 [ 124.018993][ T5298] loop5: detected capacity change from 0 to 264192 [ 124.019712][ T5300] loop2: detected capacity change from 0 to 264192 04:31:30 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:31:30 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) [ 124.048887][ T5302] loop1: detected capacity change from 0 to 264192 [ 124.086932][ T5304] loop0: detected capacity change from 0 to 264192 04:31:30 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:30 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) [ 124.147990][ T5307] loop4: detected capacity change from 0 to 264192 [ 124.149760][ T4288] loop4: unable to read partition table 04:31:30 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:30 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(0x0, 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 124.206075][ T5309] loop0: detected capacity change from 0 to 264192 [ 124.244821][ T5311] loop3: detected capacity change from 0 to 264192 04:31:30 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) 04:31:30 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) [ 124.255292][ T5313] loop2: detected capacity change from 0 to 264192 [ 124.280486][ T5315] loop1: detected capacity change from 0 to 264192 04:31:30 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(0x0, 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) [ 124.304850][ T5317] loop4: detected capacity change from 0 to 264192 [ 124.306027][ T4288] loop4: unable to read partition table 04:31:30 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(0x0, 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) [ 124.347152][ T5319] loop5: detected capacity change from 0 to 264192 [ 124.358839][ T5321] loop0: detected capacity change from 0 to 264192 [ 124.359001][ T5284] loop0: unable to read partition table 04:31:30 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(0x0, 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:31:30 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:30 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 124.470113][ T5326] loop0: detected capacity change from 0 to 264192 04:31:30 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:31:30 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(0x0, 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 124.521135][ T5329] loop2: detected capacity change from 0 to 264192 [ 124.526327][ T5330] loop3: detected capacity change from 0 to 264192 [ 124.546201][ T5332] loop1: detected capacity change from 0 to 264192 04:31:30 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) [ 124.574719][ T5334] loop0: detected capacity change from 0 to 264192 04:31:30 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:30 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x1fc00) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 124.650163][ T5336] loop4: detected capacity change from 0 to 264192 04:31:30 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:30 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) [ 124.719994][ T5339] loop2: detected capacity change from 0 to 264192 [ 124.731975][ T5341] loop3: detected capacity change from 0 to 264192 [ 124.756674][ T5344] loop1: detected capacity change from 0 to 264192 [ 124.760431][ T1921] loop1: unable to read partition table [ 124.770540][ T5345] loop5: detected capacity change from 0 to 264192 04:31:31 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x1fc00) 04:31:31 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:31 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:31:31 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 124.940147][ T5349] loop4: detected capacity change from 0 to 264192 [ 124.949199][ T5351] loop2: detected capacity change from 0 to 264192 04:31:31 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x1fc00) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:31 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x1fc00) [ 124.985596][ T5353] loop0: detected capacity change from 0 to 264192 [ 124.994587][ T5355] loop1: detected capacity change from 0 to 264192 04:31:31 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x1fc00) [ 125.052697][ T5358] loop4: detected capacity change from 0 to 264192 [ 125.083604][ T5359] loop3: detected capacity change from 0 to 264192 04:31:31 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:31 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x1fc00) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 125.145003][ T5362] loop4: detected capacity change from 0 to 264192 [ 125.150726][ T1441] blk_print_req_error: 16 callbacks suppressed [ 125.150738][ T1441] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 125.166875][ T1441] buffer_io_error: 16 callbacks suppressed [ 125.166885][ T1441] Buffer I/O error on dev loop4, logical block 0, async page read 04:31:31 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:31 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) 04:31:31 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x1fc00) [ 125.202156][ T5364] loop1: detected capacity change from 0 to 264192 [ 125.223120][ T5367] loop4: detected capacity change from 0 to 264192 [ 125.249895][ T5370] loop3: detected capacity change from 0 to 264192 [ 125.259748][ T5372] loop5: detected capacity change from 0 to 264192 [ 125.260287][ T5369] loop2: detected capacity change from 0 to 264192 04:31:31 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:31:31 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x1fc00) 04:31:31 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 125.364650][ T5374] loop0: detected capacity change from 0 to 264192 [ 125.384060][ T5376] loop4: detected capacity change from 0 to 264192 [ 125.384443][ T4288] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 125.399883][ T4288] Buffer I/O error on dev loop4, logical block 0, async page read 04:31:31 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 125.438987][ T5379] loop1: detected capacity change from 0 to 264192 [ 125.442336][ T5284] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 125.454701][ T5284] Buffer I/O error on dev loop1, logical block 0, async page read 04:31:31 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x1fc00) 04:31:31 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r0, r1, 0x0, 0x0) 04:31:31 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 125.482370][ T5382] loop2: detected capacity change from 0 to 264192 04:31:31 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r0, r1, 0x0, 0x0) [ 125.540819][ T5387] loop4: detected capacity change from 0 to 264192 [ 125.544658][ T5389] loop3: detected capacity change from 0 to 264192 04:31:31 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:31 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r0, r1, 0x0, 0x0) [ 125.613283][ T5391] loop4: detected capacity change from 0 to 264192 [ 125.677581][ T5393] loop1: detected capacity change from 0 to 264192 04:31:31 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) 04:31:31 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:31 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:31 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) [ 125.721692][ T5395] loop4: detected capacity change from 0 to 264192 04:31:31 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 125.773498][ T5398] loop2: detected capacity change from 0 to 264192 [ 125.780416][ T5399] loop3: detected capacity change from 0 to 264192 [ 125.794907][ T5401] loop0: detected capacity change from 0 to 264192 [ 125.812290][ T5403] loop4: detected capacity change from 0 to 264192 04:31:31 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 125.827864][ T5405] loop5: detected capacity change from 0 to 264192 04:31:32 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:32 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 125.939464][ T5410] loop1: detected capacity change from 0 to 264192 [ 125.969700][ T5412] loop3: detected capacity change from 0 to 264192 [ 126.001479][ T5414] loop2: detected capacity change from 0 to 264192 [ 126.007299][ T5284] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 126.017276][ T5284] Buffer I/O error on dev loop2, logical block 0, async page read 04:31:32 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:32 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:32 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 126.106625][ T5416] loop1: detected capacity change from 0 to 264192 04:31:32 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:31:32 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, 0x0, 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) 04:31:32 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 126.155671][ T5418] loop3: detected capacity change from 0 to 264192 [ 126.189413][ T5420] loop4: detected capacity change from 0 to 264192 [ 126.225414][ T5423] loop0: detected capacity change from 0 to 264192 [ 126.233082][ T5426] loop5: detected capacity change from 0 to 264192 [ 126.240277][ T5425] loop2: detected capacity change from 0 to 264192 04:31:32 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 126.342355][ T5429] loop1: detected capacity change from 0 to 264192 04:31:32 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:32 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 126.436451][ T5434] loop2: detected capacity change from 0 to 264192 04:31:32 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:32 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 126.477667][ T5436] loop1: detected capacity change from 0 to 264192 [ 126.533912][ T5440] loop3: detected capacity change from 0 to 264192 [ 126.535421][ T5439] loop4: detected capacity change from 0 to 264192 04:31:32 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, 0x0, 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) 04:31:32 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:32 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:31:32 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 126.657255][ T5445] loop2: detected capacity change from 0 to 264192 [ 126.676323][ T5446] loop5: detected capacity change from 0 to 264192 [ 126.684448][ T5448] loop0: detected capacity change from 0 to 264192 [ 126.707730][ T5450] loop1: detected capacity change from 0 to 264192 04:31:32 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:31:32 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:32 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(0x0, 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:32 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 126.853799][ T5454] loop4: detected capacity change from 0 to 264192 04:31:33 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, 0x0, 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) [ 126.916058][ T5457] loop2: detected capacity change from 0 to 264192 [ 126.919422][ T5458] loop3: detected capacity change from 0 to 264192 [ 126.948193][ T5461] loop1: detected capacity change from 0 to 264192 [ 127.004258][ T5463] loop5: detected capacity change from 0 to 264192 04:31:33 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(0x0, 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:33 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:31:33 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, 0x0, 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) [ 127.100248][ T5467] loop2: detected capacity change from 0 to 264192 04:31:33 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 127.151184][ T5471] loop4: detected capacity change from 0 to 264192 [ 127.152904][ T5469] loop0: detected capacity change from 0 to 264192 04:31:33 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(0x0, 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 127.215306][ T5473] loop1: detected capacity change from 0 to 264192 04:31:33 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(0x0, 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:33 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 127.275115][ T5477] loop2: detected capacity change from 0 to 264192 [ 127.281020][ T5284] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 127.290809][ T5284] Buffer I/O error on dev loop2, logical block 0, async page read [ 127.345476][ T5480] loop1: detected capacity change from 0 to 264192 [ 127.353746][ T5481] loop3: detected capacity change from 0 to 264192 04:31:33 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:33 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(0x0, 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:33 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) 04:31:33 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) [ 127.502067][ T5484] loop2: detected capacity change from 0 to 264192 [ 127.503955][ T5486] loop5: detected capacity change from 0 to 264192 [ 127.529912][ T5488] loop1: detected capacity change from 0 to 264192 [ 127.557262][ T5490] loop4: detected capacity change from 0 to 264192 04:31:33 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(0x0, 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:33 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, 0x0, 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:31:33 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:33 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 127.702767][ T5495] loop0: detected capacity change from 0 to 264192 [ 127.720672][ T5484] syz-executor.2 (5484) used greatest stack depth: 10464 bytes left [ 127.731292][ T5497] loop1: detected capacity change from 0 to 264192 [ 127.740236][ T5499] loop2: detected capacity change from 0 to 264192 [ 127.745990][ T5501] loop3: detected capacity change from 0 to 264192 04:31:33 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:33 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) 04:31:34 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:34 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 127.904233][ T5506] loop4: detected capacity change from 0 to 264192 [ 127.924891][ T5508] loop5: detected capacity change from 0 to 264192 [ 127.955942][ T5510] loop1: detected capacity change from 0 to 264192 [ 127.988436][ T5512] loop2: detected capacity change from 0 to 264192 04:31:34 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:31:34 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:34 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 128.088090][ T5517] loop3: detected capacity change from 0 to 264192 [ 128.108722][ T5520] loop0: detected capacity change from 0 to 264192 04:31:34 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 128.142192][ T5522] loop4: detected capacity change from 0 to 264192 04:31:34 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 128.235657][ T5527] loop1: detected capacity change from 0 to 264192 [ 128.235746][ T4288] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 128.251374][ T4288] Buffer I/O error on dev loop1, logical block 0, async page read 04:31:34 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) [ 128.292702][ T5529] loop2: detected capacity change from 0 to 264192 [ 128.353363][ T5531] loop5: detected capacity change from 0 to 264192 04:31:34 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:34 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, 0x0) 04:31:34 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:34 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 128.483689][ T5538] loop1: detected capacity change from 0 to 264192 [ 128.486168][ T5536] loop4: detected capacity change from 0 to 264192 [ 128.508146][ T5540] loop3: detected capacity change from 0 to 264192 04:31:34 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) [ 128.533388][ T5542] loop2: detected capacity change from 0 to 264192 04:31:34 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:31:34 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 128.616947][ T5545] loop0: detected capacity change from 0 to 264192 04:31:34 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) [ 128.699346][ T5549] loop0: detected capacity change from 0 to 264192 [ 128.705106][ T4288] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 128.710828][ T5551] loop1: detected capacity change from 0 to 264192 [ 128.715051][ T4288] Buffer I/O error on dev loop0, logical block 0, async page read 04:31:34 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, 0x0) 04:31:34 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:34 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) [ 128.767612][ T5553] loop5: detected capacity change from 0 to 264192 04:31:34 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) 04:31:34 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x1fc00) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:34 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) [ 128.832973][ T5557] loop0: detected capacity change from 0 to 264192 [ 128.833381][ T5558] loop2: detected capacity change from 0 to 264192 [ 128.844615][ T5559] loop3: detected capacity change from 0 to 264192 04:31:35 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:31:35 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 128.897698][ T5563] loop5: detected capacity change from 0 to 264192 [ 128.960786][ T5567] loop4: detected capacity change from 0 to 264192 [ 128.961850][ T5568] loop0: detected capacity change from 0 to 264192 04:31:35 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) 04:31:35 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) [ 129.020709][ T5572] loop1: detected capacity change from 0 to 264192 04:31:35 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:31:35 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 129.067082][ T5576] loop5: detected capacity change from 0 to 264192 [ 129.157929][ T5580] loop2: detected capacity change from 0 to 264192 [ 129.167422][ T24] audit: type=1400 audit(1659328295.257:192): avc: denied { rename } for pid=1423 comm="syslogd" name="messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 04:31:35 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, 0x0) 04:31:35 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x1fc00) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:35 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:31:35 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) 04:31:35 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x1fc00) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 129.189667][ T24] audit: type=1400 audit(1659328295.257:193): avc: denied { unlink } for pid=1423 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 129.212092][ T24] audit: type=1400 audit(1659328295.257:194): avc: denied { create } for pid=1423 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 129.234704][ T5585] loop0: detected capacity change from 0 to 264192 [ 129.241864][ T5584] loop4: detected capacity change from 0 to 264192 [ 129.251051][ T5586] loop5: detected capacity change from 0 to 264192 04:31:35 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:31:35 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) [ 129.267565][ T5588] loop3: detected capacity change from 0 to 264192 [ 129.305271][ T5590] loop1: detected capacity change from 0 to 264192 04:31:35 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) 04:31:35 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) [ 129.315138][ T5594] loop5: detected capacity change from 0 to 264192 [ 129.323720][ T5592] loop0: detected capacity change from 0 to 264192 [ 129.323882][ T1921] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 129.339404][ T1921] Buffer I/O error on dev loop0, logical block 0, async page read 04:31:35 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:31:35 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:35 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x1fc00) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 129.453969][ T5600] loop5: detected capacity change from 0 to 264192 [ 129.456016][ T4288] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 129.469676][ T4288] Buffer I/O error on dev loop5, logical block 0, async page read [ 129.471095][ T5601] loop0: detected capacity change from 0 to 264192 [ 129.501499][ T5603] loop2: detected capacity change from 0 to 264192 [ 129.512486][ T5605] loop4: detected capacity change from 0 to 264192 04:31:35 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x1fc00) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:35 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)) 04:31:35 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) 04:31:35 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 129.633270][ T5609] loop1: detected capacity change from 0 to 264192 [ 129.637108][ T5610] loop5: detected capacity change from 0 to 264192 [ 129.668324][ T5612] loop3: detected capacity change from 0 to 264192 [ 129.673968][ T5614] loop2: detected capacity change from 0 to 264192 04:31:35 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:35 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) [ 129.676920][ T5284] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 129.690541][ T5284] Buffer I/O error on dev loop2, logical block 0, async page read 04:31:35 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, 0x0, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r3}) [ 129.724776][ T5617] loop4: detected capacity change from 0 to 264192 [ 129.764587][ T5620] loop5: detected capacity change from 0 to 264192 04:31:35 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x1fc00) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:35 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:36 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:36 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) [ 129.877273][ T5623] loop1: detected capacity change from 0 to 264192 [ 129.935280][ T5626] loop0: detected capacity change from 0 to 264192 [ 129.939211][ T5284] loop0: unable to read partition table [ 129.956655][ T5629] loop4: detected capacity change from 0 to 264192 [ 129.966461][ T5630] loop2: detected capacity change from 0 to 264192 04:31:36 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:36 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)) 04:31:36 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:36 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 130.106133][ T5633] loop1: detected capacity change from 0 to 264192 [ 130.113430][ T5635] loop3: detected capacity change from 0 to 264192 [ 130.168902][ T5637] loop2: detected capacity change from 0 to 264192 04:31:36 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, 0x0, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r3}) [ 130.212894][ T5639] loop4: detected capacity change from 0 to 264192 [ 130.254554][ T5642] loop5: detected capacity change from 0 to 264192 04:31:36 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:36 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 130.336541][ T5644] loop1: detected capacity change from 0 to 264192 [ 130.337457][ T5284] blk_print_req_error: 2 callbacks suppressed [ 130.337468][ T5284] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 130.358553][ T5284] buffer_io_error: 2 callbacks suppressed [ 130.358563][ T5284] Buffer I/O error on dev loop1, logical block 0, async page read 04:31:36 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:36 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, 0x0) [ 130.396901][ T5647] loop2: detected capacity change from 0 to 264192 04:31:36 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)) [ 130.463894][ T5649] loop0: detected capacity change from 0 to 264192 [ 130.484644][ T5652] loop4: detected capacity change from 0 to 264192 [ 130.486330][ T5653] loop3: detected capacity change from 0 to 264192 [ 130.494424][ T1441] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 04:31:36 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r0, r1, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 130.507033][ T1441] Buffer I/O error on dev loop3, logical block 0, async page read 04:31:36 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 130.538757][ T5655] loop2: detected capacity change from 0 to 264192 04:31:36 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:36 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r0, r1, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 130.661255][ T5659] loop1: detected capacity change from 0 to 264192 04:31:36 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, 0x0, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r3}) [ 130.738313][ T5661] loop4: detected capacity change from 0 to 264192 [ 130.740216][ T5663] loop2: detected capacity change from 0 to 264192 [ 130.745862][ T4288] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 130.760661][ T4288] Buffer I/O error on dev loop2, logical block 0, async page read 04:31:36 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:36 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 130.827399][ T5665] loop5: detected capacity change from 0 to 264192 04:31:37 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:37 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r0, r1, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:37 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 130.903451][ T5667] loop3: detected capacity change from 0 to 264192 [ 130.906197][ T1921] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 130.919195][ T1921] Buffer I/O error on dev loop3, logical block 0, async page read [ 130.932938][ T5669] loop0: detected capacity change from 0 to 264192 [ 130.972178][ T5673] loop4: detected capacity change from 0 to 264192 [ 130.972313][ T5674] loop2: detected capacity change from 0 to 264192 [ 131.006250][ T5677] loop1: detected capacity change from 0 to 264192 04:31:37 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:37 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r0 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x1fc00) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:37 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:37 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, 0x0, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r3}) 04:31:37 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 131.189765][ T5681] loop3: detected capacity change from 0 to 264192 [ 131.204942][ T5684] loop4: detected capacity change from 0 to 264192 [ 131.213788][ T5685] loop2: detected capacity change from 0 to 264192 04:31:37 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 131.249877][ T5688] loop0: detected capacity change from 0 to 264192 [ 131.252148][ T5689] loop5: detected capacity change from 0 to 264192 [ 131.324714][ T5692] loop1: detected capacity change from 0 to 264192 04:31:37 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r0 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x1fc00) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:37 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 131.452332][ T5698] loop4: detected capacity change from 0 to 264192 04:31:37 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:37 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r0 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x1fc00) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 131.556123][ T5700] loop2: detected capacity change from 0 to 264192 04:31:37 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:37 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 131.611794][ T5702] loop4: detected capacity change from 0 to 264192 [ 131.641968][ T5706] loop0: detected capacity change from 0 to 264192 [ 131.652563][ T5707] loop3: detected capacity change from 0 to 264192 04:31:37 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, 0x0}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, 0x0, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r3}) [ 131.693226][ T5709] loop1: detected capacity change from 0 to 264192 [ 131.749463][ T5712] loop5: detected capacity change from 0 to 264192 [ 131.750249][ T4288] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 131.765286][ T4288] Buffer I/O error on dev loop5, logical block 0, async page read 04:31:37 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:37 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 131.834829][ T5715] loop4: detected capacity change from 0 to 264192 [ 131.874146][ T5719] loop1: detected capacity change from 0 to 264192 04:31:38 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:38 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, 0x0, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r3}) 04:31:38 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 132.006259][ T5723] loop2: detected capacity change from 0 to 264192 [ 132.017024][ T5725] loop3: detected capacity change from 0 to 264192 [ 132.056399][ T5727] loop4: detected capacity change from 0 to 264192 04:31:38 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, 0x0}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, 0x0, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r3}) 04:31:38 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:38 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:38 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 132.206908][ T5731] loop5: detected capacity change from 0 to 264192 [ 132.211107][ T5733] loop1: detected capacity change from 0 to 264192 [ 132.252615][ T5736] loop4: detected capacity change from 0 to 264192 [ 132.258007][ T5737] loop0: detected capacity change from 0 to 264192 04:31:38 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:38 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:38 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:38 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 132.420207][ T5742] loop3: detected capacity change from 0 to 264192 [ 132.438291][ T5744] loop2: detected capacity change from 0 to 264192 04:31:38 executing program 4: chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:38 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, 0x0}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, 0x0, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r3}) [ 132.523651][ T5748] loop0: detected capacity change from 0 to 264192 [ 132.531118][ T5749] loop1: detected capacity change from 0 to 264192 [ 132.606216][ T5754] loop5: detected capacity change from 0 to 264192 04:31:38 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f8", 0x16}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) 04:31:38 executing program 4: chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:38 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, 0x0) 04:31:38 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 132.739551][ T5761] loop0: detected capacity change from 0 to 264192 [ 132.761253][ T5761] FAT-fs (loop0): bogus number of FAT sectors [ 132.767479][ T5761] FAT-fs (loop0): Can't find a valid FAT filesystem 04:31:38 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000", 0x15}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:38 executing program 4: chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 132.840341][ T5767] loop1: detected capacity change from 0 to 264192 [ 132.843572][ T5765] loop2: detected capacity change from 0 to 264192 04:31:39 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:39 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, 0x0, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r3}) [ 132.891279][ T5769] loop0: detected capacity change from 0 to 264192 [ 132.904108][ T5769] FAT-fs (loop0): invalid media value (0x00) [ 132.910844][ T5769] FAT-fs (loop0): Can't find a valid FAT filesystem [ 132.935017][ T5773] loop5: detected capacity change from 0 to 264192 04:31:39 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, 0x0) [ 132.954621][ T5775] loop3: detected capacity change from 0 to 264192 [ 132.956196][ T4288] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 132.970527][ T4288] Buffer I/O error on dev loop3, logical block 0, async page read [ 132.975952][ T5777] loop1: detected capacity change from 0 to 264192 [ 132.979778][ T1441] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 132.994035][ T1441] Buffer I/O error on dev loop1, logical block 0, async page read 04:31:39 executing program 4: syz_mount_image$vfat(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:39 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000", 0x15}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:39 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, 0x0, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r3}) 04:31:39 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, 0x0) [ 133.166132][ T5785] loop4: detected capacity change from 0 to 264192 [ 133.173204][ T5787] loop0: detected capacity change from 0 to 264192 [ 133.193139][ T5787] FAT-fs (loop0): invalid media value (0x00) [ 133.199221][ T5787] FAT-fs (loop0): Can't find a valid FAT filesystem [ 133.248284][ T5789] loop5: detected capacity change from 0 to 264192 04:31:39 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 133.294042][ T5791] loop1: detected capacity change from 0 to 264192 04:31:39 executing program 4: syz_mount_image$vfat(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:39 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, 0x0) [ 133.384199][ T5796] loop2: detected capacity change from 0 to 264192 [ 133.453230][ T5798] loop4: detected capacity change from 0 to 264192 [ 133.468114][ T5800] loop3: detected capacity change from 0 to 264192 04:31:39 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)) 04:31:39 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, 0x0, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r3}) [ 133.568693][ T5805] loop1: detected capacity change from 0 to 264192 04:31:39 executing program 4: syz_mount_image$vfat(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 133.642778][ T5807] loop5: detected capacity change from 0 to 264192 [ 133.670155][ T5810] loop4: detected capacity change from 0 to 264192 04:31:39 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:39 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240", 0x12}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) [ 133.768313][ T5814] loop2: detected capacity change from 0 to 264192 04:31:39 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240", 0x12}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:31:39 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 133.855547][ T5816] loop0: detected capacity change from 0 to 264192 [ 133.861693][ T1441] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 133.871241][ T1441] Buffer I/O error on dev loop0, logical block 0, async page read [ 133.887531][ T5821] loop3: detected capacity change from 0 to 264192 04:31:40 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)) [ 133.931551][ T5821] FAT-fs (loop3): invalid media value (0x00) [ 133.937614][ T5821] FAT-fs (loop3): Can't find a valid FAT filesystem [ 133.944697][ T5816] FAT-fs (loop0): invalid media value (0x00) [ 133.950747][ T5816] FAT-fs (loop0): Can't find a valid FAT filesystem [ 133.970182][ T5825] loop1: detected capacity change from 0 to 264192 04:31:40 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:40 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, 0x0, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r3}) [ 133.970835][ T5284] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 133.985918][ T5284] Buffer I/O error on dev loop1, logical block 0, async page read [ 134.027228][ T4288] I/O error, dev loop0, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 134.038874][ T5829] loop4: detected capacity change from 0 to 264192 [ 134.050394][ T5830] loop5: detected capacity change from 0 to 264192 [ 134.051256][ T1921] Buffer I/O error on dev loop5, logical block 0, async page read 04:31:40 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, 0x0) 04:31:40 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 134.211875][ T5834] loop2: detected capacity change from 0 to 264192 04:31:40 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)) [ 134.284771][ T5836] loop4: detected capacity change from 0 to 264192 04:31:40 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, 0x0, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r3}) [ 134.338030][ T5839] loop1: detected capacity change from 0 to 264192 [ 134.373928][ T5841] loop5: detected capacity change from 0 to 264192 04:31:40 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:40 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)) 04:31:40 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, 0x0) 04:31:40 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:40 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400", 0xc}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 134.573836][ T5847] loop0: detected capacity change from 0 to 264192 [ 134.586636][ T5849] loop2: detected capacity change from 0 to 264192 [ 134.597022][ T5851] loop3: detected capacity change from 0 to 264192 [ 134.604744][ T5851] FAT-fs (loop3): bogus number of reserved sectors [ 134.611395][ T5851] FAT-fs (loop3): Can't find a valid FAT filesystem 04:31:40 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, 0x0, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r3}) 04:31:40 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 134.707971][ T5853] loop1: detected capacity change from 0 to 264192 [ 134.736804][ T5857] loop5: detected capacity change from 0 to 264192 [ 134.744273][ T5853] FAT-fs (loop1): bogus number of reserved sectors [ 134.750862][ T5853] FAT-fs (loop1): Can't find a valid FAT filesystem 04:31:41 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, 0x0) 04:31:41 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:41 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, 0x0) 04:31:41 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, 0x0, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r3}) [ 134.949563][ T5866] loop2: detected capacity change from 0 to 264192 [ 134.986906][ T5869] loop0: detected capacity change from 0 to 264192 04:31:41 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) [ 135.032531][ T5872] loop5: detected capacity change from 0 to 264192 04:31:41 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 135.104330][ T5874] loop3: detected capacity change from 0 to 264192 [ 135.124211][ T5874] FAT-fs (loop3): bogus number of reserved sectors [ 135.130791][ T5874] FAT-fs (loop3): Can't find a valid FAT filesystem 04:31:41 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)) [ 135.183016][ T5878] FAT-fs (loop4): bogus number of reserved sectors [ 135.189606][ T5878] FAT-fs (loop4): Can't find a valid FAT filesystem 04:31:41 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, 0x0, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r3}) [ 135.242844][ T5880] loop2: detected capacity change from 0 to 264192 [ 135.345435][ T5885] loop5: detected capacity change from 0 to 264192 04:31:41 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400", 0xc}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:41 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) [ 135.453907][ T5888] loop1: detected capacity change from 0 to 264192 [ 135.483500][ T5888] FAT-fs (loop1): bogus number of reserved sectors [ 135.490113][ T5888] FAT-fs (loop1): Can't find a valid FAT filesystem 04:31:41 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)) 04:31:41 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 135.500696][ T5890] FAT-fs (loop0): bogus number of reserved sectors [ 135.507267][ T5890] FAT-fs (loop0): Can't find a valid FAT filesystem [ 135.546402][ T5893] loop2: detected capacity change from 0 to 264192 [ 135.549641][ T5894] FAT-fs (loop4): bogus number of reserved sectors [ 135.559735][ T5894] FAT-fs (loop4): Can't find a valid FAT filesystem 04:31:41 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, 0x0, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r3}) [ 135.684921][ T5900] loop5: detected capacity change from 0 to 264192 04:31:41 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:31:41 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 135.784914][ T5902] loop3: detected capacity change from 0 to 264192 04:31:41 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)) [ 135.837972][ T5905] FAT-fs (loop4): bogus number of reserved sectors [ 135.844562][ T5905] FAT-fs (loop4): Can't find a valid FAT filesystem 04:31:41 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) [ 135.885961][ T5907] loop2: detected capacity change from 0 to 264192 [ 135.914046][ T5910] loop0: detected capacity change from 0 to 264192 04:31:42 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB='v']}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, 0x0, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r3}) 04:31:42 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:42 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:42 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:42 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) [ 136.099280][ T5914] loop5: detected capacity change from 0 to 264192 [ 136.129258][ T5916] FAT-fs (loop3): bogus number of reserved sectors [ 136.135857][ T5916] FAT-fs (loop3): Can't find a valid FAT filesystem 04:31:42 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r5, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r4, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r6}) [ 136.194943][ T5920] loop1: detected capacity change from 0 to 264192 [ 136.202968][ T5918] FAT-fs (loop4): bogus number of reserved sectors [ 136.209550][ T5918] FAT-fs (loop4): Can't find a valid FAT filesystem [ 136.274025][ T5927] loop2: detected capacity change from 0 to 264192 04:31:42 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB='v']}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, 0x0, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r3}) 04:31:42 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:42 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 136.400896][ T5935] loop1: detected capacity change from 0 to 264192 [ 136.401547][ T5933] FAT-fs (loop4): bogus number of reserved sectors [ 136.414137][ T5933] FAT-fs (loop4): Can't find a valid FAT filesystem [ 136.427222][ T5936] loop5: detected capacity change from 0 to 264192 [ 136.432237][ T4288] blk_print_req_error: 1 callbacks suppressed [ 136.432249][ T4288] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 136.448983][ T4288] Buffer I/O error on dev loop5, logical block 0, async page read 04:31:42 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:42 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:42 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, 0x0, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r3}) 04:31:42 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 136.632448][ T5942] loop1: detected capacity change from 0 to 264192 [ 136.639080][ T5941] FAT-fs (loop4): bogus number of reserved sectors [ 136.645659][ T5941] FAT-fs (loop4): Can't find a valid FAT filesystem 04:31:42 executing program 3: chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:42 executing program 2: chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) [ 136.683131][ T5944] loop5: detected capacity change from 0 to 264192 [ 136.693297][ T5946] loop0: detected capacity change from 0 to 264192 04:31:42 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:42 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:42 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:42 executing program 3: chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 136.851345][ T5955] loop0: detected capacity change from 0 to 264192 [ 136.876657][ T5957] loop4: detected capacity change from 0 to 264192 [ 136.893823][ T5960] loop2: detected capacity change from 0 to 264192 04:31:43 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) [ 136.903643][ T5957] FAT-fs (loop4): bogus number of reserved sectors [ 136.910294][ T5957] FAT-fs (loop4): Can't find a valid FAT filesystem 04:31:43 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, 0x0, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r3}) [ 136.984629][ T5964] loop1: detected capacity change from 0 to 264192 04:31:43 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 137.037539][ T5968] loop5: detected capacity change from 0 to 264192 [ 137.097032][ T5970] loop4: detected capacity change from 0 to 264192 [ 137.097932][ T1441] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 137.112720][ T1441] Buffer I/O error on dev loop4, logical block 0, async page read 04:31:43 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 137.155240][ T5970] FAT-fs (loop4): bogus number of reserved sectors [ 137.161875][ T5970] FAT-fs (loop4): Can't find a valid FAT filesystem 04:31:43 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:43 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:43 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, 0x0, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r3}) [ 137.238454][ T5974] loop2: detected capacity change from 0 to 264192 [ 137.270225][ T5978] loop5: detected capacity change from 0 to 264192 [ 137.279086][ T5980] loop4: detected capacity change from 0 to 264192 04:31:43 executing program 3: syz_mount_image$vfat(0x0, &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 137.283301][ T5976] loop1: detected capacity change from 0 to 264192 [ 137.295703][ T5980] FAT-fs (loop4): bogus number of reserved sectors [ 137.302259][ T5980] FAT-fs (loop4): Can't find a valid FAT filesystem 04:31:43 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:43 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:43 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 137.352918][ T5983] loop3: detected capacity change from 0 to 264192 [ 137.400036][ T5987] loop1: detected capacity change from 0 to 264192 [ 137.400640][ T5988] loop2: detected capacity change from 0 to 264192 [ 137.468478][ T5991] loop0: detected capacity change from 0 to 264192 04:31:43 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:43 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYBLOB='v']}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, 0x0, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r3}) 04:31:43 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 137.573716][ T5995] loop4: detected capacity change from 0 to 264192 [ 137.597032][ T5995] FAT-fs (loop4): bogus number of reserved sectors [ 137.603673][ T5995] FAT-fs (loop4): Can't find a valid FAT filesystem [ 137.635716][ T5998] loop5: detected capacity change from 0 to 264192 [ 137.671356][ T6000] loop1: detected capacity change from 0 to 264192 04:31:43 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x50, 0x3}, 0xd00}, @generic={0x5, "c9f82881cf2383c34673609a3c75"}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xf0f4, 0x0, 0x0, 0x0, 0x8005, &(0x7f0000000240)='veth1_to_team\x00', 0x1, 0x7000000}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:43 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x50, 0x3}, 0xd00}, @generic={0x5, "c9f82881cf2383c34673609a3c75"}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xf0f4, 0x0, 0x0, 0x0, 0x8005, &(0x7f0000000240)='veth1_to_team\x00', 0x1, 0x7000000}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, 0x0, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r5}) 04:31:43 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x50, 0x3}, 0xd00}, @generic={0x5, "c9f82881cf2383c34673609a3c75"}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xf0f4, 0x0, 0x0, 0x0, 0x8005, &(0x7f0000000240)='veth1_to_team\x00', 0x1, 0x7000000}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 137.753000][ T6003] loop2: detected capacity change from 0 to 264192 04:31:43 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 137.800811][ T6006] loop0: detected capacity change from 0 to 264192 [ 137.824172][ T6008] loop3: detected capacity change from 0 to 264192 04:31:44 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x50, 0x3}, 0xd00}, @generic={0x5, "c9f82881cf2383c34673609a3c75"}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xf0f4, 0x0, 0x0, 0x0, 0x8005, &(0x7f0000000240)='veth1_to_team\x00', 0x1, 0x7000000}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 137.896298][ T6011] loop4: detected capacity change from 0 to 264192 [ 137.920076][ T6011] FAT-fs (loop4): bogus number of reserved sectors [ 137.926694][ T6011] FAT-fs (loop4): Can't find a valid FAT filesystem 04:31:44 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYBLOB='v']}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, 0x0, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r3}) [ 137.995996][ T6015] loop1: detected capacity change from 0 to 264192 04:31:44 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r0 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(0xffffffffffffffff, r0, 0x0, 0x1fc00) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:44 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x50, 0x3}, 0xd00}, @generic={0x5, "c9f82881cf2383c34673609a3c75"}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xf0f4, 0x0, 0x0, 0x0, 0x8005, &(0x7f0000000240)='veth1_to_team\x00', 0x1, 0x7000000}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 138.042397][ T6017] loop5: detected capacity change from 0 to 264192 [ 138.095981][ T6020] loop2: detected capacity change from 0 to 264192 [ 138.111133][ T6022] loop0: detected capacity change from 0 to 264192 04:31:44 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:44 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:44 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x50, 0x3}, 0xd00}, @generic={0x5, "c9f82881cf2383c34673609a3c75"}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xf0f4, 0x0, 0x0, 0x0, 0x8005, &(0x7f0000000240)='veth1_to_team\x00', 0x1, 0x7000000}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r7, @ANYRESHEX=r6, @ANYRESOCT=r5, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, r6, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r8}) [ 138.248604][ T6025] loop4: detected capacity change from 0 to 264192 [ 138.275771][ T6025] FAT-fs (loop4): bogus number of reserved sectors [ 138.282347][ T6025] FAT-fs (loop4): Can't find a valid FAT filesystem 04:31:44 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x50, 0x3}, 0xd00}, @generic={0x5, "c9f82881cf2383c34673609a3c75"}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xf0f4, 0x0, 0x0, 0x0, 0x8005, &(0x7f0000000240)='veth1_to_team\x00', 0x1, 0x7000000}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r6, @ANYRESHEX=r5, @ANYRESOCT=r4, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 138.300777][ T6028] loop1: detected capacity change from 0 to 264192 [ 138.334325][ T6032] loop3: detected capacity change from 0 to 264192 [ 138.339462][ T6030] loop2: detected capacity change from 0 to 264192 04:31:44 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYBLOB='v']}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, 0x0, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r3}) 04:31:44 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x208, 0x1001, 0x0, 0x0, 0x40000000}, 0x0, 0x7, 0xffffffffffffffff, 0xb) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x50, 0x3}, 0xd00}, @generic={0x5, "c9f82881cf2383c34673609a3c75"}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xf0f4, 0x0, 0x0, 0x0, 0x8005, &(0x7f0000000240)='veth1_to_team\x00', 0x1, 0x7000000}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r6, @ANYRESHEX=r5, @ANYRESOCT=r4, @ANYBLOB="76bce60018c72398a408357175af5006ea9c87"]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 138.462107][ T6037] loop5: detected capacity change from 0 to 264192 04:31:44 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 138.504208][ T6039] loop0: detected capacity change from 0 to 264192 04:31:44 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:44 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 138.567859][ T6041] loop1: detected capacity change from 0 to 264192 [ 138.630672][ T6045] loop3: detected capacity change from 0 to 264192 [ 138.642445][ T6047] loop4: detected capacity change from 0 to 264192 04:31:44 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 138.677667][ T6047] FAT-fs (loop4): bogus number of reserved sectors [ 138.684223][ T6047] FAT-fs (loop4): Can't find a valid FAT filesystem 04:31:44 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 1) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 04:31:44 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 2) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 138.735568][ T6049] loop2: detected capacity change from 0 to 264192 [ 138.737431][ T4288] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 138.751270][ T4288] Buffer I/O error on dev loop2, logical block 0, async page read 04:31:44 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 138.797484][ T6052] loop0: detected capacity change from 0 to 264192 04:31:44 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYBLOB]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, 0x0, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r3}) 04:31:44 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 2) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) [ 138.844016][ T6054] loop1: detected capacity change from 0 to 264192 [ 138.878221][ T6056] loop3: detected capacity change from 0 to 264192 04:31:45 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:45 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 3) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) [ 138.899988][ T6060] loop5: detected capacity change from 0 to 264192 [ 138.905225][ T6059] loop0: detected capacity change from 0 to 264192 [ 138.936809][ T6062] loop2: detected capacity change from 0 to 264192 04:31:45 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:45 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:45 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 4) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 04:31:45 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 3) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:45 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 5) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) [ 139.043697][ T6067] loop4: detected capacity change from 0 to 264192 [ 139.056021][ T6069] loop0: detected capacity change from 0 to 264192 [ 139.068441][ T6067] FAT-fs (loop4): bogus number of reserved sectors [ 139.075020][ T6067] FAT-fs (loop4): Can't find a valid FAT filesystem 04:31:45 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 3) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 139.115247][ T6073] loop1: detected capacity change from 0 to 264192 [ 139.122175][ T6075] loop3: detected capacity change from 0 to 264192 04:31:45 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYBLOB]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, 0x0, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r3}) [ 139.194922][ T6078] loop2: detected capacity change from 0 to 264192 04:31:45 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:45 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:45 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 139.315468][ T6080] loop5: detected capacity change from 0 to 264192 [ 139.346891][ T6082] loop1: detected capacity change from 0 to 264192 04:31:45 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 139.406030][ T6085] loop2: detected capacity change from 0 to 264192 [ 139.408057][ T6087] loop3: detected capacity change from 0 to 264192 04:31:45 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 5) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 139.454892][ T6089] loop4: detected capacity change from 0 to 264192 [ 139.464000][ T6089] FAT-fs (loop4): bogus number of reserved sectors [ 139.470608][ T6089] FAT-fs (loop4): Can't find a valid FAT filesystem [ 139.531746][ T6093] loop1: detected capacity change from 0 to 264192 04:31:45 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 5) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:45 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 5) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:45 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 6) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 04:31:45 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400", 0xc}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:45 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYBLOB]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, 0x0, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r3}) [ 139.654832][ T6097] loop3: detected capacity change from 0 to 264192 [ 139.658454][ T6098] loop2: detected capacity change from 0 to 264192 [ 139.686654][ T6100] loop0: detected capacity change from 0 to 264192 04:31:45 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 6) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 139.766368][ T6103] loop5: detected capacity change from 0 to 264192 [ 139.772105][ T6105] loop4: detected capacity change from 0 to 264192 [ 139.812008][ T6105] FAT-fs (loop4): bogus number of reserved sectors [ 139.818608][ T6105] FAT-fs (loop4): Can't find a valid FAT filesystem 04:31:46 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 6) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:46 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 6) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 139.862879][ T6109] loop1: detected capacity change from 0 to 264192 [ 139.959539][ T6116] loop3: detected capacity change from 0 to 264192 [ 139.960587][ T5284] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 139.969980][ T6115] loop2: detected capacity change from 0 to 264192 [ 139.975224][ T5284] Buffer I/O error on dev loop3, logical block 0, async page read 04:31:46 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 7) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 04:31:46 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 7) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:46 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400", 0xc}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:46 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYBLOB='v']}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, 0x0, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r3}) 04:31:46 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 7) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:46 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 7) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 140.139000][ T6120] loop4: detected capacity change from 0 to 264192 [ 140.139320][ T6122] loop1: detected capacity change from 0 to 264192 [ 140.159315][ T6120] FAT-fs (loop4): bogus number of reserved sectors [ 140.165910][ T6120] FAT-fs (loop4): Can't find a valid FAT filesystem [ 140.172746][ T6124] loop0: detected capacity change from 0 to 264192 [ 140.214881][ T6126] loop5: detected capacity change from 0 to 264192 [ 140.225403][ T6128] loop2: detected capacity change from 0 to 264192 [ 140.257246][ T6133] loop3: detected capacity change from 0 to 264192 04:31:46 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:46 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400", 0xc}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:46 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:46 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 140.442036][ T6138] loop1: detected capacity change from 0 to 264192 [ 140.478098][ T6141] loop4: detected capacity change from 0 to 264192 [ 140.490863][ T6143] loop3: detected capacity change from 0 to 264192 [ 140.506567][ T6141] FAT-fs (loop4): bogus number of reserved sectors [ 140.506603][ T6144] loop2: detected capacity change from 0 to 264192 [ 140.513144][ T6141] FAT-fs (loop4): Can't find a valid FAT filesystem 04:31:46 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYBLOB='v']}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, 0x0, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r3}) 04:31:46 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 8) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 04:31:46 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 9) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:46 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 9) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 140.659414][ T6149] loop5: detected capacity change from 0 to 264192 04:31:46 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 9) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 140.709973][ T6152] loop1: detected capacity change from 0 to 264192 [ 140.719928][ T6154] loop2: detected capacity change from 0 to 264192 [ 140.727021][ T6155] loop0: detected capacity change from 0 to 264192 04:31:46 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240", 0x12}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 140.814023][ T6158] loop3: detected capacity change from 0 to 264192 [ 140.817942][ T6161] loop4: detected capacity change from 0 to 264192 [ 140.847953][ T6161] FAT-fs (loop4): invalid media value (0x00) [ 140.854044][ T6161] FAT-fs (loop4): Can't find a valid FAT filesystem 04:31:47 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:47 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:47 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 140.950972][ T6166] loop1: detected capacity change from 0 to 264192 [ 140.997598][ T6169] loop3: detected capacity change from 0 to 264192 [ 140.998847][ T4288] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 141.013606][ T4288] Buffer I/O error on dev loop3, logical block 0, async page read [ 141.037380][ T6171] loop2: detected capacity change from 0 to 264192 04:31:47 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYBLOB='v']}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, 0x0, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r3}) 04:31:47 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 9) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 04:31:47 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 11) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:47 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 11) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:47 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240", 0x12}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 141.170753][ T6175] loop5: detected capacity change from 0 to 264192 [ 141.188397][ T6178] loop0: detected capacity change from 0 to 264192 04:31:47 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 11) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 141.234767][ T6181] loop1: detected capacity change from 0 to 264192 [ 141.242834][ T6182] loop3: detected capacity change from 0 to 264192 [ 141.302465][ T6185] loop4: detected capacity change from 0 to 264192 [ 141.307101][ T6188] loop2: detected capacity change from 0 to 264192 [ 141.316009][ T6185] FAT-fs (loop4): invalid media value (0x00) [ 141.322061][ T6185] FAT-fs (loop4): Can't find a valid FAT filesystem 04:31:47 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 12) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:47 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 12) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:47 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 12) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:47 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYBLOB]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, 0x0, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r3}) [ 141.485121][ T6193] loop3: detected capacity change from 0 to 264192 [ 141.514913][ T6195] loop1: detected capacity change from 0 to 264192 04:31:47 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 10) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) [ 141.557860][ T6197] loop2: detected capacity change from 0 to 264192 [ 141.562484][ T4288] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 141.573618][ T4288] Buffer I/O error on dev loop2, logical block 0, async page read [ 141.587961][ T6200] loop5: detected capacity change from 0 to 264192 [ 141.588096][ T5284] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 141.603779][ T5284] Buffer I/O error on dev loop5, logical block 0, async page read [ 141.649758][ T6202] loop0: detected capacity change from 0 to 264192 [ 141.671616][ T6199] ================================================================== [ 141.679728][ T6199] BUG: KCSAN: data-race in mark_buffer_dirty_inode / mark_buffer_dirty_inode [ 141.688602][ T6199] [ 141.690925][ T6199] write to 0xffff888138206058 of 8 bytes by task 6193 on cpu 0: [ 141.698554][ T6199] mark_buffer_dirty_inode+0x18c/0x1b0 [ 141.704030][ T6199] fat12_ent_put+0x11d/0x180 [ 141.708626][ T6199] fat_alloc_clusters+0x47d/0xa80 [ 141.713652][ T6199] fat_get_block+0x263/0x600 [ 141.718239][ T6199] __block_write_begin_int+0x33d/0xc90 [ 141.723695][ T6199] block_write_begin+0x73/0x170 [ 141.728545][ T6199] cont_write_begin+0x3f1/0x520 [ 141.733394][ T6199] fat_write_begin+0x5d/0xe0 [ 141.737989][ T6199] generic_perform_write+0x1d4/0x3f0 [ 141.743280][ T6199] __generic_file_write_iter+0xe3/0x280 [ 141.748834][ T6199] generic_file_write_iter+0x75/0x130 [ 141.754204][ T6199] do_iter_readv_writev+0x27b/0x300 [ 141.759406][ T6199] do_iter_write+0x16f/0x5c0 [ 141.764000][ T6199] vfs_iter_write+0x4c/0x70 [ 141.768505][ T6199] iter_file_splice_write+0x44a/0x7c0 [ 141.773879][ T6199] direct_splice_actor+0x80/0xa0 [ 141.778817][ T6199] splice_direct_to_actor+0x345/0x660 [ 141.784190][ T6199] do_splice_direct+0xfb/0x180 [ 141.788958][ T6199] do_sendfile+0x3bf/0x910 [ 141.793410][ T6199] __x64_sys_sendfile64+0x10c/0x150 [ 141.798618][ T6199] do_syscall_64+0x2b/0x70 [ 141.803046][ T6199] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 141.808942][ T6199] [ 141.811281][ T6199] read to 0xffff888138206058 of 8 bytes by task 6199 on cpu 1: [ 141.818267][ T6206] loop4: detected capacity change from 0 to 264192 [ 141.818808][ T6199] mark_buffer_dirty_inode+0x92/0x1b0 [ 141.830670][ T6199] fat12_ent_put+0x11d/0x180 [ 141.835253][ T6199] fat_ent_write+0x5e/0xd0 [ 141.839658][ T6199] fat_chain_add+0x15b/0x410 [ 141.844254][ T6199] fat_add_cluster+0x74/0xd0 [ 141.848830][ T6199] fat_fallocate+0x125/0x1c0 [ 141.853409][ T6199] vfs_fallocate+0x355/0x3d0 [ 141.857989][ T6199] do_vfs_ioctl+0x12d9/0x1390 [ 141.862654][ T6199] __se_sys_ioctl+0x83/0x140 [ 141.867229][ T6199] __x64_sys_ioctl+0x3f/0x50 [ 141.871814][ T6199] do_syscall_64+0x2b/0x70 [ 141.876216][ T6199] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 141.882141][ T6199] [ 141.884446][ T6199] value changed: 0x0000000000000000 -> 0xffff888138195210 [ 141.891533][ T6199] [ 141.893851][ T6199] Reported by Kernel Concurrency Sanitizer on: 04:31:47 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 11) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 04:31:47 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240", 0x12}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 141.899980][ T6199] CPU: 1 PID: 6199 Comm: syz-executor.3 Not tainted 5.19.0-rc8-syzkaller-00168-g334c0ef6429f-dirty #0 [ 141.910984][ T6199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 141.921124][ T6199] ================================================================== [ 141.942410][ T6206] FAT-fs (loop4): invalid media value (0x00) 04:31:48 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 13) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 141.948454][ T6206] FAT-fs (loop4): Can't find a valid FAT filesystem 04:31:48 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 13) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 142.028750][ T6216] loop3: detected capacity change from 0 to 264192 04:31:48 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 13) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:48 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 14) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 142.129127][ T6218] loop2: detected capacity change from 0 to 264192 04:31:48 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYBLOB]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, 0x0, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r3}) 04:31:48 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000", 0x15}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 142.207998][ T6220] loop1: detected capacity change from 0 to 264192 [ 142.228670][ T6222] loop3: detected capacity change from 0 to 264192 04:31:48 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 14) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 142.262448][ T6224] loop5: detected capacity change from 0 to 264192 [ 142.326254][ T6228] loop4: detected capacity change from 0 to 264192 [ 142.342873][ T6229] loop2: detected capacity change from 0 to 264192 [ 142.343147][ T4288] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 142.358558][ T4288] Buffer I/O error on dev loop2, logical block 0, async page read [ 142.369196][ T6228] FAT-fs (loop4): invalid media value (0x00) [ 142.375204][ T6228] FAT-fs (loop4): Can't find a valid FAT filesystem 04:31:48 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 12) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 04:31:48 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 15) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:48 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 14) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 142.483352][ T6235] loop0: detected capacity change from 0 to 264192 [ 142.510053][ T6237] loop1: detected capacity change from 0 to 264192 04:31:48 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 15) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:48 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYBLOB]}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, 0x0, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r3}) 04:31:48 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000", 0x15}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 142.574807][ T6240] loop3: detected capacity change from 0 to 264192 [ 142.597138][ T6243] loop2: detected capacity change from 0 to 264192 04:31:48 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 15) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 142.696546][ T6246] loop5: detected capacity change from 0 to 264192 [ 142.712202][ T6248] loop4: detected capacity change from 0 to 264192 04:31:48 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 13) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) [ 142.749838][ T6251] loop1: detected capacity change from 0 to 264192 [ 142.762837][ T6248] FAT-fs (loop4): invalid media value (0x00) [ 142.768887][ T6248] FAT-fs (loop4): Can't find a valid FAT filesystem 04:31:48 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 16) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:48 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 16) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 142.815969][ T6253] loop0: detected capacity change from 0 to 264192 [ 142.818434][ T4288] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 142.831795][ T4288] Buffer I/O error on dev loop0, logical block 0, async page read [ 142.885506][ T6258] loop3: detected capacity change from 0 to 264192 [ 142.900654][ T6260] loop2: detected capacity change from 0 to 264192 04:31:49 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 16) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:49 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 17) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:49 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 17) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:49 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYBLOB='v']}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, 0x0, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r3}) [ 143.065825][ T6265] loop1: detected capacity change from 0 to 264192 04:31:49 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000", 0x15}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:49 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 14) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) [ 143.128928][ T6267] loop3: detected capacity change from 0 to 264192 [ 143.143934][ T6269] loop2: detected capacity change from 0 to 264192 [ 143.182087][ T6273] loop5: detected capacity change from 0 to 264192 [ 143.195904][ T6274] loop4: detected capacity change from 0 to 264192 [ 143.204809][ T6276] loop0: detected capacity change from 0 to 264192 04:31:49 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 17) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 143.246017][ T6274] FAT-fs (loop4): invalid media value (0x00) [ 143.252110][ T6274] FAT-fs (loop4): Can't find a valid FAT filesystem 04:31:49 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 143.323031][ T6281] loop1: detected capacity change from 0 to 264192 04:31:49 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 143.413871][ T6286] loop2: detected capacity change from 0 to 264192 [ 143.442403][ T6288] loop3: detected capacity change from 0 to 264192 04:31:49 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYBLOB='v']}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, 0x0, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r3}) 04:31:49 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:49 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f8", 0x16}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:49 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 15) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) [ 143.578813][ T6292] loop5: detected capacity change from 0 to 264192 [ 143.596140][ T6294] loop1: detected capacity change from 0 to 264192 04:31:49 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 19) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:49 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 19) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 143.654934][ T6297] loop4: detected capacity change from 0 to 264192 [ 143.668590][ T6298] loop0: detected capacity change from 0 to 264192 [ 143.674971][ T1441] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 143.675648][ T6300] loop2: detected capacity change from 0 to 264192 [ 143.684278][ T1441] Buffer I/O error on dev loop0, logical block 0, async page read [ 143.699136][ T6297] FAT-fs (loop4): bogus number of FAT sectors [ 143.705349][ T6297] FAT-fs (loop4): Can't find a valid FAT filesystem [ 143.727310][ T6304] loop3: detected capacity change from 0 to 264192 04:31:49 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 19) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:50 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 20) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:50 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 20) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 143.906919][ T6309] loop1: detected capacity change from 0 to 264192 04:31:50 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYBLOB='v']}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, 0x0, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r3}) [ 143.948017][ T6311] loop2: detected capacity change from 0 to 264192 [ 143.988243][ T6313] loop3: detected capacity change from 0 to 264192 [ 144.008995][ T6315] loop5: detected capacity change from 0 to 264192 04:31:50 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 16) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 04:31:50 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 20) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:50 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 21) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:50 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f8", 0x16}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 144.142083][ T6319] loop0: detected capacity change from 0 to 264192 [ 144.176453][ T6321] loop1: detected capacity change from 0 to 264192 [ 144.182434][ T5284] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 04:31:50 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 21) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 144.192147][ T5284] Buffer I/O error on dev loop1, logical block 0, async page read [ 144.215493][ T6324] loop2: detected capacity change from 0 to 264192 [ 144.216990][ T6325] loop3: detected capacity change from 0 to 264192 04:31:50 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRES64, @ANYBLOB='v']}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, 0x0, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r3}) [ 144.265739][ T6327] loop4: detected capacity change from 0 to 264192 [ 144.277034][ T6327] FAT-fs (loop4): bogus number of FAT sectors [ 144.283157][ T6327] FAT-fs (loop4): Can't find a valid FAT filesystem 04:31:50 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 22) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:50 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 21) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 144.359990][ T6333] loop5: detected capacity change from 0 to 264192 04:31:50 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 22) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 144.457642][ T6337] loop2: detected capacity change from 0 to 264192 [ 144.466670][ T6339] loop1: detected capacity change from 0 to 264192 [ 144.467543][ T6340] loop3: detected capacity change from 0 to 264192 [ 144.474900][ T4288] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 144.488977][ T4288] Buffer I/O error on dev loop3, logical block 0, async page read 04:31:50 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 17) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 04:31:50 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f8", 0x16}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 144.612483][ T6345] loop0: detected capacity change from 0 to 264192 [ 144.645886][ T6347] loop4: detected capacity change from 0 to 264192 04:31:50 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 23) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:50 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 23) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:50 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 22) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:50 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRES64, @ANYBLOB='v']}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, 0x0, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r3}) [ 144.658511][ T6347] FAT-fs (loop4): bogus number of FAT sectors [ 144.664631][ T6347] FAT-fs (loop4): Can't find a valid FAT filesystem [ 144.720006][ T6349] loop3: detected capacity change from 0 to 264192 [ 144.726039][ T6352] loop5: detected capacity change from 0 to 264192 [ 144.728584][ T6353] loop1: detected capacity change from 0 to 264192 [ 144.737471][ T1441] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 144.745724][ T6356] loop2: detected capacity change from 0 to 264192 [ 144.748902][ T1441] Buffer I/O error on dev loop1, logical block 0, async page read 04:31:51 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 23) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:51 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 24) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:51 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 24) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 144.966099][ T6362] loop1: detected capacity change from 0 to 264192 04:31:51 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 145.020440][ T6364] loop2: detected capacity change from 0 to 264192 [ 145.030449][ T6366] loop3: detected capacity change from 0 to 264192 [ 145.062564][ T6368] loop4: detected capacity change from 0 to 264192 [ 145.062678][ T1921] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 145.078299][ T1921] Buffer I/O error on dev loop4, logical block 0, async page read 04:31:51 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 18) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 04:31:51 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRES64, @ANYBLOB='v']}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, 0x0, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r3}) 04:31:51 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:51 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 24) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:51 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 25) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:51 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 25) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 145.225728][ T6374] loop0: detected capacity change from 0 to 264192 [ 145.237486][ T6376] loop5: detected capacity change from 0 to 264192 [ 145.262758][ T6377] loop4: detected capacity change from 0 to 264192 [ 145.282458][ T6379] loop2: detected capacity change from 0 to 264192 [ 145.291106][ T6382] loop3: detected capacity change from 0 to 264192 [ 145.291120][ T6383] loop1: detected capacity change from 0 to 264192 04:31:51 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 145.409041][ T6389] loop4: detected capacity change from 0 to 264192 04:31:51 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:51 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 25) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:51 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 26) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:51 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 19) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) [ 145.523625][ T6392] loop1: detected capacity change from 0 to 264192 [ 145.525957][ T1441] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 145.539360][ T1441] Buffer I/O error on dev loop1, logical block 0, async page read [ 145.549314][ T6394] loop4: detected capacity change from 0 to 264192 04:31:51 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 26) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 145.588109][ T6396] loop2: detected capacity change from 0 to 264192 [ 145.620649][ T6398] loop0: detected capacity change from 0 to 264192 [ 145.670522][ T6402] loop3: detected capacity change from 0 to 264192 04:31:51 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYBLOB='v']}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, 0x0, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r3}) 04:31:51 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 27) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:51 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 26) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 145.785422][ T6407] loop5: detected capacity change from 0 to 264192 04:31:51 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 145.849012][ T6409] loop2: detected capacity change from 0 to 264192 [ 145.854491][ T6411] loop1: detected capacity change from 0 to 264192 04:31:52 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 27) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 145.938025][ T6414] loop4: detected capacity change from 0 to 264192 04:31:52 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 28) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:52 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 27) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:52 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 20) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) [ 145.992170][ T6417] loop3: detected capacity change from 0 to 264192 [ 146.038777][ T6419] loop2: detected capacity change from 0 to 264192 [ 146.061743][ T6421] loop1: detected capacity change from 0 to 264192 [ 146.067947][ T4288] loop1: unable to read partition table [ 146.087337][ T6423] loop0: detected capacity change from 0 to 264192 04:31:52 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 28) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:52 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYBLOB='v']}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, 0x0, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r3}) [ 146.202117][ T6428] loop3: detected capacity change from 0 to 264192 [ 146.202985][ T4288] loop3: unable to read partition table [ 146.221684][ T6430] loop5: detected capacity change from 0 to 264192 04:31:52 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 28) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:52 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 29) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:52 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 29) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 146.317799][ T6433] loop1: detected capacity change from 0 to 264192 [ 146.352449][ T6436] loop2: detected capacity change from 0 to 264192 04:31:52 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:52 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 21) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) [ 146.438230][ T6439] loop3: detected capacity change from 0 to 264192 04:31:52 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 29) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 146.496319][ T6442] loop4: detected capacity change from 0 to 264192 [ 146.524129][ T6445] loop0: detected capacity change from 0 to 264192 [ 146.524266][ T4288] loop0: unable to read partition table 04:31:52 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRES64, @ANYBLOB='v']}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, 0x0, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r3}) 04:31:52 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 30) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:52 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 30) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 146.596135][ T6447] loop1: detected capacity change from 0 to 264192 [ 146.642609][ T6451] loop5: detected capacity change from 0 to 264192 [ 146.649432][ T6452] loop3: detected capacity change from 0 to 264192 [ 146.661804][ T6454] loop2: detected capacity change from 0 to 264192 04:31:52 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 22) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 04:31:52 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 31) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:52 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 23) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 04:31:52 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 31) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 146.847126][ T6460] loop0: detected capacity change from 0 to 264192 04:31:53 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 30) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:53 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 146.895914][ T6462] loop3: detected capacity change from 0 to 264192 [ 146.913693][ T6464] loop2: detected capacity change from 0 to 264192 [ 146.915276][ T1441] blk_print_req_error: 6 callbacks suppressed [ 146.915288][ T1441] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 146.935521][ T1441] buffer_io_error: 6 callbacks suppressed 04:31:53 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRES64, @ANYBLOB='v']}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, 0x0, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r3}) [ 146.935532][ T1441] Buffer I/O error on dev loop2, logical block 0, async page read [ 146.965186][ T6467] loop0: detected capacity change from 0 to 264192 [ 146.972032][ T6468] loop1: detected capacity change from 0 to 264192 [ 146.983516][ T6470] loop4: detected capacity change from 0 to 264192 [ 147.021829][ T6472] loop5: detected capacity change from 0 to 264192 04:31:53 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 32) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:53 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 32) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:53 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 31) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 147.213563][ T6480] loop2: detected capacity change from 0 to 264192 [ 147.220633][ T6468] syz-executor.1 (6468) used greatest stack depth: 10432 bytes left [ 147.279048][ T6482] loop1: detected capacity change from 0 to 264192 04:31:53 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 24) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) [ 147.334970][ T6484] loop3: detected capacity change from 0 to 264192 04:31:53 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRES64, @ANYBLOB='v']}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, 0x0, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r3}) 04:31:53 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 147.387056][ T6488] loop0: detected capacity change from 0 to 264192 04:31:53 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 33) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 147.466372][ T6491] loop5: detected capacity change from 0 to 264192 04:31:53 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 32) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:53 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 33) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 147.520641][ T6494] loop4: detected capacity change from 0 to 264192 [ 147.535994][ T6497] loop2: detected capacity change from 0 to 264192 [ 147.547167][ T6498] loop1: detected capacity change from 0 to 264192 [ 147.597963][ T6501] loop3: detected capacity change from 0 to 264192 04:31:53 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 34) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:53 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 33) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:53 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 34) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 147.762322][ T6506] loop1: detected capacity change from 0 to 264192 [ 147.796336][ T6508] loop2: detected capacity change from 0 to 264192 04:31:53 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 25) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) [ 147.810418][ T6510] loop3: detected capacity change from 0 to 264192 04:31:53 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:53 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYBLOB='v']}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000800)={0x8, 0xc, {0x2, @struct={0xffff, 0x135}, 0x0, 0x9, 0x937c, 0x297, 0x6, 0x0, 0x21, @struct={0x7fff, 0x213d}, 0x4, 0x100, [0x3, 0x2, 0x9, 0xfffffffffffffffd, 0x296, 0x4]}, {0x100, @struct={0x19b, 0x80000001}, 0x0, 0x2, 0x5, 0x3, 0xffffffffffffffe0, 0x10001, 0x1, @usage=0x8000000000000001, 0x2, 0x6, [0x1000, 0x18, 0x0, 0x5, 0xfffffffffffffc78]}, {0xffff, @usage=0x80000000, 0x0, 0xffff, 0x8, 0x4, 0x9, 0x100000001, 0x480, @struct={0x4, 0xc66f}, 0xc50, 0x5, [0x10000, 0x80000000, 0x7, 0x23, 0x994, 0x10000]}, {0x2, 0x81, 0xf8}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, 0x0, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid=r3}) [ 147.839114][ T6512] loop0: detected capacity change from 0 to 264192 04:31:54 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 34) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:54 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 35) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 147.938529][ T6515] loop5: detected capacity change from 0 to 264192 [ 147.976426][ T6518] loop2: detected capacity change from 0 to 264192 04:31:54 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 35) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 147.983291][ T6520] loop4: detected capacity change from 0 to 264192 [ 148.003283][ T6521] loop1: detected capacity change from 0 to 264192 [ 148.030288][ T6523] loop3: detected capacity change from 0 to 264192 [ 148.032658][ T5284] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 148.045983][ T5284] Buffer I/O error on dev loop3, logical block 0, async page read 04:31:54 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 36) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:54 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 26) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 04:31:54 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 36) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:54 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYBLOB='v']}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, 0x0, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid}) [ 148.232000][ T6528] loop2: detected capacity change from 0 to 264192 [ 148.233464][ T6529] loop3: detected capacity change from 0 to 264192 [ 148.260310][ T6531] loop0: detected capacity change from 0 to 264192 04:31:54 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 35) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 148.304951][ T6533] loop5: detected capacity change from 0 to 264192 04:31:54 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 37) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 148.390597][ T6538] loop1: detected capacity change from 0 to 264192 04:31:54 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 37) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:54 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(0x0, 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 148.482891][ T6541] loop2: detected capacity change from 0 to 264192 [ 148.523896][ T6544] loop4: detected capacity change from 0 to 264192 [ 148.543814][ T6546] loop3: detected capacity change from 0 to 264192 04:31:54 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 27) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 04:31:54 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 36) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:54 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYBLOB='v']}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, 0x0, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid}) 04:31:54 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(0x0, 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:54 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 38) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 148.697013][ T6552] loop0: detected capacity change from 0 to 264192 [ 148.710158][ T6553] loop1: detected capacity change from 0 to 264192 [ 148.711708][ T6554] loop5: detected capacity change from 0 to 264192 [ 148.737536][ T6556] loop4: detected capacity change from 0 to 264192 04:31:54 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 38) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 148.778623][ T6558] loop2: detected capacity change from 0 to 264192 [ 148.830357][ T6563] loop3: detected capacity change from 0 to 264192 [ 148.836622][ T1441] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 148.846105][ T1441] Buffer I/O error on dev loop3, logical block 0, async page read [ 148.874517][ T6560] ================================================================== [ 148.882636][ T6560] BUG: KCSAN: data-race in mark_buffer_dirty_inode / sync_mapping_buffers [ 148.891161][ T6560] [ 148.893487][ T6560] write to 0xffff8881381f5128 of 8 bytes by task 6553 on cpu 1: [ 148.901151][ T6560] sync_mapping_buffers+0x175/0x800 [ 148.906364][ T6560] fat_file_fsync+0xa9/0x100 [ 148.911052][ T6560] vfs_fsync_range+0x107/0x120 [ 148.915825][ T6560] generic_file_write_iter+0x103/0x130 [ 148.921361][ T6560] do_iter_readv_writev+0x27b/0x300 [ 148.926576][ T6560] do_iter_write+0x16f/0x5c0 [ 148.931170][ T6560] vfs_iter_write+0x4c/0x70 [ 148.935778][ T6560] iter_file_splice_write+0x44a/0x7c0 [ 148.941166][ T6560] direct_splice_actor+0x80/0xa0 [ 148.946116][ T6560] splice_direct_to_actor+0x345/0x660 [ 148.951501][ T6560] do_splice_direct+0xfb/0x180 [ 148.956269][ T6560] do_sendfile+0x3bf/0x910 [ 148.960697][ T6560] __x64_sys_sendfile64+0x10c/0x150 [ 148.965912][ T6560] do_syscall_64+0x2b/0x70 [ 148.970338][ T6560] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 148.976243][ T6560] [ 148.978570][ T6560] read to 0xffff8881381f5128 of 8 bytes by task 6560 on cpu 0: [ 148.986111][ T6560] mark_buffer_dirty_inode+0x92/0x1b0 [ 148.991506][ T6560] fat12_ent_put+0x11d/0x180 [ 148.996100][ T6560] fat_alloc_clusters+0x47d/0xa80 [ 149.001138][ T6560] fat_add_cluster+0x43/0xd0 [ 149.005738][ T6560] fat_fallocate+0x125/0x1c0 [ 149.010591][ T6560] vfs_fallocate+0x355/0x3d0 [ 149.015191][ T6560] do_vfs_ioctl+0x12d9/0x1390 [ 149.019873][ T6560] __se_sys_ioctl+0x83/0x140 [ 149.024463][ T6560] __x64_sys_ioctl+0x3f/0x50 [ 149.029061][ T6560] do_syscall_64+0x2b/0x70 [ 149.033488][ T6560] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 149.039387][ T6560] [ 149.041706][ T6560] value changed: 0xffff888138195e10 -> 0x0000000000000000 [ 149.048819][ T6560] [ 149.051142][ T6560] Reported by Kernel Concurrency Sanitizer on: [ 149.057311][ T6560] CPU: 0 PID: 6560 Comm: syz-executor.1 Not tainted 5.19.0-rc8-syzkaller-00168-g334c0ef6429f-dirty #0 04:31:55 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYBLOB='v']}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{r2}, 0x0, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid}) 04:31:55 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(0x0, 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 149.068248][ T6560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 149.078307][ T6560] ================================================================== 04:31:55 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 39) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 149.125945][ T6569] loop4: detected capacity change from 0 to 264192 [ 149.145433][ T6571] loop5: detected capacity change from 0 to 264192 04:31:55 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 37) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:55 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 39) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:55 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 28) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) [ 149.202829][ T6573] loop2: detected capacity change from 0 to 264192 [ 149.237424][ T6575] loop3: detected capacity change from 0 to 264192 [ 149.238835][ T4288] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 04:31:55 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 149.250521][ T6579] loop1: detected capacity change from 0 to 264192 [ 149.253086][ T4288] Buffer I/O error on dev loop3, logical block 0, async page read [ 149.271289][ T6577] loop0: detected capacity change from 0 to 264192 [ 149.273546][ T5284] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 149.286981][ T5284] Buffer I/O error on dev loop0, logical block 0, async page read [ 149.410075][ T6586] loop4: detected capacity change from 0 to 264192 04:31:55 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 40) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:55 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 40) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:55 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 38) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 149.491093][ T6588] loop2: detected capacity change from 0 to 264192 [ 149.533517][ T6590] loop1: detected capacity change from 0 to 264192 [ 149.535212][ T6592] loop3: detected capacity change from 0 to 264192 04:31:55 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:55 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYBLOB='v']}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000c00)={{r2}, 0x0, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid}) 04:31:55 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 41) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:55 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 41) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 149.636695][ T6596] loop4: detected capacity change from 0 to 264192 [ 149.675346][ T6599] loop5: detected capacity change from 0 to 264192 04:31:55 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 29) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 04:31:55 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 39) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 149.729487][ T6601] loop2: detected capacity change from 0 to 264192 [ 149.746674][ T6603] loop3: detected capacity change from 0 to 264192 04:31:55 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 149.795039][ T6606] loop1: detected capacity change from 0 to 264192 [ 149.807463][ T6608] loop0: detected capacity change from 0 to 264192 [ 149.853960][ T6612] loop4: detected capacity change from 0 to 264192 04:31:56 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:56 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 42) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:56 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 42) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 150.000927][ T6616] loop3: detected capacity change from 0 to 264192 [ 150.006361][ T6618] loop4: detected capacity change from 0 to 264192 [ 150.017687][ T6620] loop2: detected capacity change from 0 to 264192 04:31:56 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYBLOB='v']}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000c00)={{r2}, 0x0, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid}) 04:31:56 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 150.163233][ T6624] loop5: detected capacity change from 0 to 264192 [ 150.168797][ T6626] loop4: detected capacity change from 0 to 264192 04:31:56 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 43) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:56 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 30) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 04:31:56 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 43) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:56 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 150.299512][ T6630] loop3: detected capacity change from 0 to 264192 [ 150.316229][ T6631] loop0: detected capacity change from 0 to 264192 [ 150.336950][ T6633] loop2: detected capacity change from 0 to 264192 [ 150.397320][ T6635] loop4: detected capacity change from 0 to 264192 04:31:56 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYBLOB='v']}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000c00)={{r2}, 0x0, 0x8, @unused=[0x1800000, 0x8001, 0x0, 0x8000], @devid}) [ 150.513665][ T6640] loop5: detected capacity change from 0 to 264192 04:31:56 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:56 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 44) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:56 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 44) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:56 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:56 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 31) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) [ 150.626054][ T6644] loop3: detected capacity change from 0 to 264192 [ 150.633834][ T6647] loop2: detected capacity change from 0 to 264192 [ 150.641631][ T6646] loop4: detected capacity change from 0 to 264192 04:31:56 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 45) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 150.729783][ T6649] loop1: detected capacity change from 0 to 264192 [ 150.740907][ T6651] loop0: detected capacity change from 0 to 264192 04:31:56 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 45) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:56 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 150.805985][ T6653] loop3: detected capacity change from 0 to 264192 04:31:56 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYBLOB='v']}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, 0x0) [ 150.847718][ T6657] loop2: detected capacity change from 0 to 264192 [ 150.908210][ T6659] loop4: detected capacity change from 0 to 264192 [ 150.932561][ T6663] loop5: detected capacity change from 0 to 264192 04:31:57 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r0, r1, 0x0, 0x1fc02) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:57 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 46) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:57 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 46) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 151.024172][ T6665] loop1: detected capacity change from 0 to 264192 04:31:57 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:57 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 32) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) [ 151.104111][ T6671] loop2: detected capacity change from 0 to 264192 [ 151.122226][ T6670] loop3: detected capacity change from 0 to 264192 [ 151.159301][ T6673] loop4: detected capacity change from 0 to 264192 [ 151.165352][ T6675] loop0: detected capacity change from 0 to 264192 04:31:57 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 33) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 04:31:57 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r0, r1, 0x0, 0x1fc03) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:57 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYBLOB='v']}, @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, 0x0) 04:31:57 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:57 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 47) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:57 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 47) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 151.298339][ T6681] loop1: detected capacity change from 0 to 264192 [ 151.300401][ T4288] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 151.314068][ T4288] Buffer I/O error on dev loop1, logical block 0, async page read [ 151.364918][ T6684] loop4: detected capacity change from 0 to 264192 [ 151.373509][ T6686] loop3: detected capacity change from 0 to 264192 [ 151.389825][ T6688] loop5: detected capacity change from 0 to 264192 [ 151.396630][ T6690] loop2: detected capacity change from 0 to 264192 04:31:57 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) sendfile(r0, r1, 0x0, 0x1fc04) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) 04:31:57 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fc00) (fail_nth: 48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) [ 151.618174][ T6698] loop1: detected capacity change from 0 to 264192 [ 151.631056][ T6699] loop3: detected capacity change from 0 to 264192