, <r5=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {}, {r4}, {r4}, {0x0, r5}, {}, {}, {}, {}, {r4, r5}, {0x0, r5}, {}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3, r5}, {}, {}, {0x0, r5}, {r4, r5}, {}, {r3, r5}, {}, {}, {r4}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {r3, r5}, {}, {}, {}, {r4}, {r3}, {}, {r4}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {}, {0x0, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {r4}, {}, {}, {}, {r3}, {0x0, r5}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {}, {r3}, {0x0, r5}, {}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {}, {0x0, r5}, {}, {r3, r5}, {}, {}, {r3, r5}, {0x0, r5}, {r4, r5}, {}, {}, {}, {}, {}, {r4, r5}, {}, {r3}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {}, {}, {r3}, {}, {r4, r5}, {r3, r5}, {0x0, r5}, {}, {}, {r4, r5}, {r4}, {}, {}, {r3}, {}, {}, {}, {0x0, r5}, {}, {0x0, r5}, {0x0, r5}, {}, {0x0, r5}, {}, {0x0, r5}, {r4}, {}, {}, {}, {}, {}, {r3, r5}, {r4}, {}, {}, {}, {r4}, {0x0, r5}, {}, {}, {r3}, {r3}, {0x0, r5}, {r3}, {r4}, {}, {}, {}, {r3}, {0x0, r5}, {r4}, {0x0, r5}, {r3, r5}, {}, {0x0, r5}, {}, {}, {0x0, r5}, {}, {r3}, {}, {r3}, {r3}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {r3}, {}, {r3}, {r4}, {}, {r3, r5}, {}, {}, {}, {r4}, {0x0, r5}, {r3}, {}, {r4}, {}, {}, {r4}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {r4, r5}, {}, {0x0, r5}, {}, {r4, r5}, {r4, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {r3, r5}, {}, {r3, r5}, {}, {r4}, {r4}, {r3}, {}, {}, {}, {}, {}, {}, {r4}, {0x0, r5}], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}], 0x5, "710ce82b173d12"})
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r6, 0x0, 0x8400fffffffa)

00:07:52 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000a25000000190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  472.226570][T30371] loop1: detected capacity change from 0 to 264192
[  472.233888][T30373] loop4: detected capacity change from 0 to 264192
[  472.243588][T30372] loop2: detected capacity change from 0 to 264192
00:07:52 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:07:52 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x0)

00:07:52 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000b25000000190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  472.381381][T30376] loop0: detected capacity change from 0 to 264192
[  472.421671][T30376] FAT-fs (loop0): bogus number of reserved sectors
[  472.428376][T30376] FAT-fs (loop0): Can't find a valid FAT filesystem
00:07:52 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000055300)={0x0, ""/256, 0x0, <r1=>0x0})
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={<r3=>0x0, ""/256, <r4=>0x0, <r5=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {}, {r4}, {r4}, {0x0, r5}, {}, {}, {}, {}, {r4, r5}, {0x0, r5}, {}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3, r5}, {}, {}, {0x0, r5}, {r4, r5}, {}, {r3, r5}, {}, {}, {r4}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {r3, r5}, {}, {}, {}, {r4}, {r3}, {}, {r4}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {}, {0x0, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {r4}, {}, {}, {}, {r3}, {0x0, r5}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {}, {r3}, {0x0, r5}, {}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {}, {0x0, r5}, {}, {r3, r5}, {}, {}, {r3, r5}, {0x0, r5}, {r4, r5}, {}, {}, {}, {}, {}, {r4, r5}, {}, {r3}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {}, {}, {r3}, {}, {r4, r5}, {r3, r5}, {0x0, r5}, {}, {}, {r4, r5}, {r4}, {}, {}, {r3}, {}, {}, {}, {0x0, r5}, {}, {0x0, r5}, {0x0, r5}, {}, {0x0, r5}, {}, {0x0, r5}, {r4}, {}, {}, {}, {}, {}, {r3, r5}, {r4}, {}, {}, {}, {r4}, {0x0, r5}, {}, {}, {r3}, {r3}, {0x0, r5}, {r3}, {r4}, {}, {}, {}, {r3}, {0x0, r5}, {r4}, {0x0, r5}, {r3, r5}, {}, {0x0, r5}, {}, {}, {0x0, r5}, {}, {r3}, {}, {r3}, {r3}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {r3}, {}, {r3}, {r4}, {}, {r3, r5}, {}, {}, {}, {r4}, {0x0, r5}, {r3}, {}, {r4}, {}, {}, {r4}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {r4, r5}, {}, {0x0, r5}, {}, {r4, r5}, {r4, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {r3, r5}, {}, {r3, r5}, {}, {r4}, {r4}, {r3}, {}, {}, {}, {}, {}, {}, {r4}, {0x0, r5}], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r1}, {}, {0x0, r5}], 0x5, "710ce82b173d12"})
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r6, 0x0, 0x8400fffffffa)

00:07:52 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={<r2=>0x0, ""/256, <r3=>0x0, <r4=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {}, {r3}, {r3}, {0x0, r4}, {}, {}, {}, {}, {r3, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {r3}, {}, {}, {}, {r2}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r2, r4}, {0x0, r4}, {r3, r4}, {}, {}, {}, {}, {}, {r3, r4}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {}, {r2}, {}, {r3, r4}, {r2, r4}, {0x0, r4}, {}, {}, {r3, r4}, {r3}, {}, {}, {r2}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {0x0, r4}, {r3}, {}, {}, {}, {}, {}, {r2, r4}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r2}, {}, {r2}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {}, {r3}, {}, {}, {r3}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r3, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r3, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r2, r4}, {}, {r2, r4}, {}, {r3}, {r3}, {r2}, {}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0x5, "710ce82b173d12"})
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r5, 0x0, 0x8400fffffffa)

00:07:52 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000c25000000190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:07:52 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x0)

[  472.582479][T30382] loop1: detected capacity change from 0 to 264192
[  472.591215][T30383] loop3: detected capacity change from 0 to 264192
00:07:52 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000d25000000190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  472.747904][T30388] loop2: detected capacity change from 0 to 264192
[  472.762425][T30389] loop4: detected capacity change from 0 to 264192
00:07:52 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000e25000000190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  472.817154][T30391] loop1: detected capacity change from 0 to 264192
00:07:53 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600001025000000190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:07:53 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [], 0x0, "2156816c73038c"})
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={<r2=>0x0, ""/256, <r3=>0x0, <r4=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {}, {r3}, {r3}, {0x0, r4}, {}, {}, {}, {}, {r3, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {r3}, {}, {}, {}, {r2}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r2, r4}, {0x0, r4}, {r3, r4}, {}, {}, {}, {}, {}, {r3, r4}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {}, {r2}, {}, {r3, r4}, {r2, r4}, {0x0, r4}, {}, {}, {r3, r4}, {r3}, {}, {}, {r2}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {0x0, r4}, {r3}, {}, {}, {}, {}, {}, {r2, r4}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r2}, {}, {r2}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {}, {r3}, {}, {}, {r3}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r3, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r3, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r2, r4}, {}, {r2, r4}, {}, {r3}, {r3}, {r2}, {}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}], 0x0, "2156816c73038c"})
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r5, 0x0, 0x8400fffffffa)

00:07:53 executing program 0:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x0, &(0x7f0000000300), 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  473.270130][T30399] loop1: detected capacity change from 0 to 264192
00:07:53 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={<r2=>0x0, ""/256, <r3=>0x0, <r4=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {}, {r3}, {r3}, {0x0, r4}, {}, {}, {}, {}, {r3, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {r3}, {}, {}, {}, {r2}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r2, r4}, {0x0, r4}, {r3, r4}, {}, {}, {}, {}, {}, {r3, r4}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {}, {r2}, {}, {r3, r4}, {r2, r4}, {0x0, r4}, {}, {}, {r3, r4}, {r3}, {}, {}, {r2}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {0x0, r4}, {r3}, {}, {}, {}, {}, {}, {r2, r4}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r2}, {}, {r2}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {}, {r3}, {}, {}, {r3}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r3, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r3, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r2, r4}, {}, {r2, r4}, {}, {r3}, {r3}, {r2}, {}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0x5, "710ce82b173d12"})
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r5, 0x0, 0x8400fffffffa)

00:07:53 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:07:53 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600001125000000190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:07:53 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [], 0x0, "2156816c73038c"})
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={<r2=>0x0, ""/256, <r3=>0x0, <r4=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {}, {r3}, {r3}, {0x0, r4}, {}, {}, {}, {}, {r3, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {r3}, {}, {}, {}, {r2}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r2, r4}, {0x0, r4}, {r3, r4}, {}, {}, {}, {}, {}, {r3, r4}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {}, {r2}, {}, {r3, r4}, {r2, r4}, {0x0, r4}, {}, {}, {r3, r4}, {r3}, {}, {}, {r2}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {0x0, r4}, {r3}, {}, {}, {}, {}, {}, {r2, r4}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r2}, {}, {r2}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {}, {r3}, {}, {}, {r3}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r3, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r3, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r2, r4}, {}, {r2, r4}, {}, {r3}, {r3}, {r2}, {}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}], 0x0, "2156816c73038c"})
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r5, 0x0, 0x8400fffffffa)

00:07:53 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000055300)={0x0, ""/256, 0x0, <r1=>0x0})
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={<r3=>0x0, ""/256, <r4=>0x0, <r5=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {}, {r4}, {r4}, {0x0, r5}, {}, {}, {}, {}, {r4, r5}, {0x0, r5}, {}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3, r5}, {}, {}, {0x0, r5}, {r4, r5}, {}, {r3, r5}, {}, {}, {r4}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {r3, r5}, {}, {}, {}, {r4}, {r3}, {}, {r4}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {}, {0x0, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {r4}, {}, {}, {}, {r3}, {0x0, r5}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {}, {r3}, {0x0, r5}, {}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {}, {0x0, r5}, {}, {r3, r5}, {}, {}, {r3, r5}, {0x0, r5}, {r4, r5}, {}, {}, {}, {}, {}, {r4, r5}, {}, {r3}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {}, {}, {r3}, {}, {r4, r5}, {r3, r5}, {0x0, r5}, {}, {}, {r4, r5}, {r4}, {}, {}, {r3}, {}, {}, {}, {0x0, r5}, {}, {0x0, r5}, {0x0, r5}, {}, {0x0, r5}, {}, {0x0, r5}, {r4}, {}, {}, {}, {}, {}, {r3, r5}, {r4}, {}, {}, {}, {r4}, {0x0, r5}, {}, {}, {r3}, {r3}, {0x0, r5}, {r3}, {r4}, {}, {}, {}, {r3}, {0x0, r5}, {r4}, {0x0, r5}, {r3, r5}, {}, {0x0, r5}, {}, {}, {0x0, r5}, {}, {r3}, {}, {r3}, {r3}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {r3}, {}, {r3}, {r4}, {}, {r3, r5}, {}, {}, {}, {r4}, {0x0, r5}, {r3}, {}, {r4}, {}, {}, {r4}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {r4, r5}, {}, {0x0, r5}, {}, {r4, r5}, {r4, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {r3, r5}, {}, {r3, r5}, {}, {r4}, {r4}, {r3}, {}, {}, {}, {}, {}, {}, {r4}, {0x0, r5}], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r1}, {}, {0x0, r5}], 0x5, "710ce82b173d12"})
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r6, 0x0, 0x8400fffffffa)

[  473.367577][T30401] loop0: detected capacity change from 0 to 264192
[  473.388454][T30401] FAT-fs (loop0): bogus number of reserved sectors
[  473.395008][T30401] FAT-fs (loop0): Can't find a valid FAT filesystem
00:07:53 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600001225000000190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  473.470018][T30405] loop4: detected capacity change from 0 to 264192
[  473.497610][T30407] loop2: detected capacity change from 0 to 264192
00:07:53 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600002525000000190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  473.627493][T30411] loop1: detected capacity change from 0 to 264192
[  473.650048][T30413] loop3: detected capacity change from 0 to 264192
00:07:53 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={<r2=>0x0, ""/256, <r3=>0x0, <r4=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {}, {r3}, {r3}, {0x0, r4}, {}, {}, {}, {}, {r3, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {r3}, {}, {}, {}, {r2}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r2, r4}, {0x0, r4}, {r3, r4}, {}, {}, {}, {}, {}, {r3, r4}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {}, {r2}, {}, {r3, r4}, {r2, r4}, {0x0, r4}, {}, {}, {r3, r4}, {r3}, {}, {}, {r2}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {0x0, r4}, {r3}, {}, {}, {}, {}, {}, {r2, r4}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r2}, {}, {r2}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {}, {r3}, {}, {}, {r3}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r3, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r3, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r2, r4}, {}, {r2, r4}, {}, {r3}, {r3}, {r2}, {}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0x5, "710ce82b173d12"})
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r5, 0x0, 0x8400fffffffa)

00:07:53 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600004825000000190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:07:53 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000055300)={0x0, ""/256, 0x0, <r1=>0x0})
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={<r3=>0x0, ""/256, <r4=>0x0, <r5=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {}, {r4}, {r4}, {0x0, r5}, {}, {}, {}, {}, {r4, r5}, {0x0, r5}, {}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3, r5}, {}, {}, {0x0, r5}, {r4, r5}, {}, {r3, r5}, {}, {}, {r4}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {r3, r5}, {}, {}, {}, {r4}, {r3}, {}, {r4}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {}, {0x0, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {r4}, {}, {}, {}, {r3}, {0x0, r5}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {}, {r3}, {0x0, r5}, {}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {}, {0x0, r5}, {}, {r3, r5}, {}, {}, {r3, r5}, {0x0, r5}, {r4, r5}, {}, {}, {}, {}, {}, {r4, r5}, {}, {r3}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {}, {}, {r3}, {}, {r4, r5}, {r3, r5}, {0x0, r5}, {}, {}, {r4, r5}, {r4}, {}, {}, {r3}, {}, {}, {}, {0x0, r5}, {}, {0x0, r5}, {0x0, r5}, {}, {0x0, r5}, {}, {0x0, r5}, {r4}, {}, {}, {}, {}, {}, {r3, r5}, {r4}, {}, {}, {}, {r4}, {0x0, r5}, {}, {}, {r3}, {r3}, {0x0, r5}, {r3}, {r4}, {}, {}, {}, {r3}, {0x0, r5}, {r4}, {0x0, r5}, {r3, r5}, {}, {0x0, r5}, {}, {}, {0x0, r5}, {}, {r3}, {}, {r3}, {r3}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {r3}, {}, {r3}, {r4}, {}, {r3, r5}, {}, {}, {}, {r4}, {0x0, r5}, {r3}, {}, {r4}, {}, {}, {r4}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {r4, r5}, {}, {0x0, r5}, {}, {r4, r5}, {r4, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {r3, r5}, {}, {r3, r5}, {}, {r4}, {r4}, {r3}, {}, {}, {}, {}, {}, {}, {r4}, {0x0, r5}], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r1}, {}, {0x0, r5}], 0x5, "710ce82b173d12"})
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r6, 0x0, 0x8400fffffffa)

00:07:53 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600004c25000000190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  473.873647][T30418] loop4: detected capacity change from 0 to 264192
[  474.021153][T30422] validate_nla: 12 callbacks suppressed
[  474.021192][T30422] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  474.033083][T30423] loop2: detected capacity change from 0 to 264192
00:07:54 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={<r2=>0x0, ""/256, <r3=>0x0, <r4=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {}, {r3}, {r3}, {0x0, r4}, {}, {}, {}, {}, {r3, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {r3}, {}, {}, {}, {r2}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r2, r4}, {0x0, r4}, {r3, r4}, {}, {}, {}, {}, {}, {r3, r4}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {}, {r2}, {}, {r3, r4}, {r2, r4}, {0x0, r4}, {}, {}, {r3, r4}, {r3}, {}, {}, {r2}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {0x0, r4}, {r3}, {}, {}, {}, {}, {}, {r2, r4}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r2}, {}, {r2}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {}, {r3}, {}, {}, {r3}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r3, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r3, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r2, r4}, {}, {r2, r4}, {}, {r3}, {r3}, {r2}, {}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0x5, "710ce82b173d12"})
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r5, 0x0, 0x8400fffffffa)

00:07:54 executing program 0:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{0x0}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  474.246456][T30425] loop4: detected capacity change from 0 to 264192
[  474.337188][T30427] loop0: detected capacity change from 0 to 264192
[  474.349156][T30427] FAT-fs (loop0): bogus number of reserved sectors
[  474.355733][T30427] FAT-fs (loop0): Can't find a valid FAT filesystem
00:07:54 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000055300)={0x0, ""/256, 0x0, <r1=>0x0})
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={<r3=>0x0, ""/256, <r4=>0x0, <r5=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {}, {r4}, {r4}, {0x0, r5}, {}, {}, {}, {}, {r4, r5}, {0x0, r5}, {}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3, r5}, {}, {}, {0x0, r5}, {r4, r5}, {}, {r3, r5}, {}, {}, {r4}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {r3, r5}, {}, {}, {}, {r4}, {r3}, {}, {r4}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {}, {0x0, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {r4}, {}, {}, {}, {r3}, {0x0, r5}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {}, {r3}, {0x0, r5}, {}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {}, {0x0, r5}, {}, {r3, r5}, {}, {}, {r3, r5}, {0x0, r5}, {r4, r5}, {}, {}, {}, {}, {}, {r4, r5}, {}, {r3}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {}, {}, {r3}, {}, {r4, r5}, {r3, r5}, {0x0, r5}, {}, {}, {r4, r5}, {r4}, {}, {}, {r3}, {}, {}, {}, {0x0, r5}, {}, {0x0, r5}, {0x0, r5}, {}, {0x0, r5}, {}, {0x0, r5}, {r4}, {}, {}, {}, {}, {}, {r3, r5}, {r4}, {}, {}, {}, {r4}, {0x0, r5}, {}, {}, {r3}, {r3}, {0x0, r5}, {r3}, {r4}, {}, {}, {}, {r3}, {0x0, r5}, {r4}, {0x0, r5}, {r3, r5}, {}, {0x0, r5}, {}, {}, {0x0, r5}, {}, {r3}, {}, {r3}, {r3}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {r3}, {}, {r3}, {r4}, {}, {r3, r5}, {}, {}, {}, {r4}, {0x0, r5}, {r3}, {}, {r4}, {}, {}, {r4}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {r4, r5}, {}, {0x0, r5}, {}, {r4, r5}, {r4, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {r3, r5}, {}, {r3, r5}, {}, {r4}, {r4}, {r3}, {}, {}, {}, {}, {}, {}, {r4}, {0x0, r5}], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r1}, {}, {0x0, r5}], 0x5, "710ce82b173d12"})
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r6, 0x0, 0x8400fffffffa)

00:07:54 executing program 3:
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:07:54 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [], 0x0, "2156816c73038c"})
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={<r2=>0x0, ""/256, <r3=>0x0, <r4=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {}, {r3}, {r3}, {0x0, r4}, {}, {}, {}, {}, {r3, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {r3}, {}, {}, {}, {r2}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r2, r4}, {0x0, r4}, {r3, r4}, {}, {}, {}, {}, {}, {r3, r4}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {}, {r2}, {}, {r3, r4}, {r2, r4}, {0x0, r4}, {}, {}, {r3, r4}, {r3}, {}, {}, {r2}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {0x0, r4}, {r3}, {}, {}, {}, {}, {}, {r2, r4}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r2}, {}, {r2}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {}, {r3}, {}, {}, {r3}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r3, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r3, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r2, r4}, {}, {r2, r4}, {}, {r3}, {r3}, {r2}, {}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}], 0x0, "2156816c73038c"})
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r5, 0x0, 0x8400fffffffa)

00:07:54 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600006025000000190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:07:54 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r1 = perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={<r2=>0x0, ""/256, <r3=>0x0, <r4=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {}, {r3}, {r3}, {0x0, r4}, {}, {}, {}, {}, {r3, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {r3}, {}, {}, {}, {r2}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r2, r4}, {0x0, r4}, {r3, r4}, {}, {}, {}, {}, {}, {r3, r4}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {}, {r2}, {}, {r3, r4}, {r2, r4}, {0x0, r4}, {}, {}, {r3, r4}, {r3}, {}, {}, {r2}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {0x0, r4}, {r3}, {}, {}, {}, {}, {}, {r2, r4}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r2}, {}, {r2}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {}, {r3}, {}, {}, {r3}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r3, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r3, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r2, r4}, {}, {r2, r4}, {}, {r3}, {r3}, {r2}, {}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0x5, "710ce82b173d12"})
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r5, 0x0, 0x8400fffffffa)

00:07:54 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600006825000000190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  474.540695][T30434] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  474.540735][T30433] loop2: detected capacity change from 0 to 264192
[  474.549972][T30435] loop1: detected capacity change from 0 to 264192
[  474.557390][T30432] loop4: detected capacity change from 0 to 264192
00:07:54 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600006c25000000190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  474.702698][T30439] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
00:07:54 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r1 = perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={<r2=>0x0, ""/256, <r3=>0x0, <r4=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {}, {r3}, {r3}, {0x0, r4}, {}, {}, {}, {}, {r3, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {r3}, {}, {}, {}, {r2}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r2, r4}, {0x0, r4}, {r3, r4}, {}, {}, {}, {}, {}, {r3, r4}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {}, {r2}, {}, {r3, r4}, {r2, r4}, {0x0, r4}, {}, {}, {r3, r4}, {r3}, {}, {}, {r2}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {0x0, r4}, {r3}, {}, {}, {}, {}, {}, {r2, r4}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r2}, {}, {r2}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {}, {r3}, {}, {}, {r3}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r3, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r3, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r2, r4}, {}, {r2, r4}, {}, {r3}, {r3}, {r2}, {}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0x5, "710ce82b173d12"})
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r5, 0x0, 0x8400fffffffa)

00:07:54 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600007425000000190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  474.836570][T30441] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
00:07:54 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [], 0x0, "2156816c73038c"})
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={<r2=>0x0, ""/256, <r3=>0x0, <r4=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {}, {r3}, {r3}, {0x0, r4}, {}, {}, {}, {}, {r3, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {r3}, {}, {}, {}, {r2}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r2, r4}, {0x0, r4}, {r3, r4}, {}, {}, {}, {}, {}, {r3, r4}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {}, {r2}, {}, {r3, r4}, {r2, r4}, {0x0, r4}, {}, {}, {r3, r4}, {r3}, {}, {}, {r2}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {0x0, r4}, {r3}, {}, {}, {}, {}, {}, {r2, r4}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r2}, {}, {r2}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {}, {r3}, {}, {}, {r3}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r3, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r3, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r2, r4}, {}, {r2, r4}, {}, {r3}, {r3}, {r2}, {}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}], 0x0, "2156816c73038c"})
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa)

00:07:54 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000055300)={0x0, ""/256, 0x0, <r1=>0x0})
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={<r3=>0x0, ""/256, <r4=>0x0, <r5=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {}, {r4}, {r4}, {0x0, r5}, {}, {}, {}, {}, {r4, r5}, {0x0, r5}, {}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3, r5}, {}, {}, {0x0, r5}, {r4, r5}, {}, {r3, r5}, {}, {}, {r4}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {r3, r5}, {}, {}, {}, {r4}, {r3}, {}, {r4}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {}, {0x0, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {r4}, {}, {}, {}, {r3}, {0x0, r5}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {}, {r3}, {0x0, r5}, {}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {}, {0x0, r5}, {}, {r3, r5}, {}, {}, {r3, r5}, {0x0, r5}, {r4, r5}, {}, {}, {}, {}, {}, {r4, r5}, {}, {r3}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {}, {}, {r3}, {}, {r4, r5}, {r3, r5}, {0x0, r5}, {}, {}, {r4, r5}, {r4}, {}, {}, {r3}, {}, {}, {}, {0x0, r5}, {}, {0x0, r5}, {0x0, r5}, {}, {0x0, r5}, {}, {0x0, r5}, {r4}, {}, {}, {}, {}, {}, {r3, r5}, {r4}, {}, {}, {}, {r4}, {0x0, r5}, {}, {}, {r3}, {r3}, {0x0, r5}, {r3}, {r4}, {}, {}, {}, {r3}, {0x0, r5}, {r4}, {0x0, r5}, {r3, r5}, {}, {0x0, r5}, {}, {}, {0x0, r5}, {}, {r3}, {}, {r3}, {r3}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {r3}, {}, {r3}, {r4}, {}, {r3, r5}, {}, {}, {}, {r4}, {0x0, r5}, {r3}, {}, {r4}, {}, {}, {r4}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {r4, r5}, {}, {0x0, r5}, {}, {r4, r5}, {r4, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {r3, r5}, {}, {r3, r5}, {}, {r4}, {r4}, {r3}, {}, {}, {}, {}, {}, {}, {r4}, {0x0, r5}], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r1}, {}, {0x0, r5}], 0x5, "710ce82b173d12"})
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r6, 0x0, 0x8400fffffffa)

[  474.967187][T30443] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  475.050985][T30445] loop4: detected capacity change from 0 to 264192
[  475.145284][T30448] loop1: detected capacity change from 0 to 264192
[  475.153950][T30449] loop2: detected capacity change from 0 to 264192
00:07:55 executing program 0:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{0x0}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:07:55 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600007725000000190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  475.256538][T30451] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  475.345742][T30453] loop0: detected capacity change from 0 to 264192
[  475.378966][T30453] FAT-fs (loop0): bogus number of reserved sectors
[  475.385577][T30453] FAT-fs (loop0): Can't find a valid FAT filesystem
00:07:55 executing program 3:
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:07:55 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600007a25000000190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:07:55 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r1 = perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={<r2=>0x0, ""/256, <r3=>0x0, <r4=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {}, {r3}, {r3}, {0x0, r4}, {}, {}, {}, {}, {r3, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {r3}, {}, {}, {}, {r2}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r2, r4}, {0x0, r4}, {r3, r4}, {}, {}, {}, {}, {}, {r3, r4}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {}, {r2}, {}, {r3, r4}, {r2, r4}, {0x0, r4}, {}, {}, {r3, r4}, {r3}, {}, {}, {r2}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {0x0, r4}, {r3}, {}, {}, {}, {}, {}, {r2, r4}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r2}, {}, {r2}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {}, {r3}, {}, {}, {r3}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r3, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r3, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r2, r4}, {}, {r2, r4}, {}, {r3}, {r3}, {r2}, {}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0x5, "710ce82b173d12"})
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r5, 0x0, 0x8400fffffffa)

00:07:55 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000055300)={0x0, ""/256, 0x0, <r1=>0x0})
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={<r3=>0x0, ""/256, <r4=>0x0, <r5=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {}, {r4}, {r4}, {0x0, r5}, {}, {}, {}, {}, {r4, r5}, {0x0, r5}, {}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3, r5}, {}, {}, {0x0, r5}, {r4, r5}, {}, {r3, r5}, {}, {}, {r4}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {r3, r5}, {}, {}, {}, {r4}, {r3}, {}, {r4}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {}, {0x0, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {r4}, {}, {}, {}, {r3}, {0x0, r5}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {}, {r3}, {0x0, r5}, {}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {}, {0x0, r5}, {}, {r3, r5}, {}, {}, {r3, r5}, {0x0, r5}, {r4, r5}, {}, {}, {}, {}, {}, {r4, r5}, {}, {r3}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {}, {}, {r3}, {}, {r4, r5}, {r3, r5}, {0x0, r5}, {}, {}, {r4, r5}, {r4}, {}, {}, {r3}, {}, {}, {}, {0x0, r5}, {}, {0x0, r5}, {0x0, r5}, {}, {0x0, r5}, {}, {0x0, r5}, {r4}, {}, {}, {}, {}, {}, {r3, r5}, {r4}, {}, {}, {}, {r4}, {0x0, r5}, {}, {}, {r3}, {r3}, {0x0, r5}, {r3}, {r4}, {}, {}, {}, {r3}, {0x0, r5}, {r4}, {0x0, r5}, {r3, r5}, {}, {0x0, r5}, {}, {}, {0x0, r5}, {}, {r3}, {}, {r3}, {r3}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {r3}, {}, {r3}, {r4}, {}, {r3, r5}, {}, {}, {}, {r4}, {0x0, r5}, {r3}, {}, {r4}, {}, {}, {r4}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {r4, r5}, {}, {0x0, r5}, {}, {r4, r5}, {r4, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {r3, r5}, {}, {r3, r5}, {}, {r4}, {r4}, {r3}, {}, {}, {}, {}, {}, {}, {r4}, {0x0, r5}], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r1}, {}, {0x0, r5}], 0x5, "710ce82b173d12"})
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r6, 0x0, 0x8400fffffffa)

00:07:55 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [], 0x0, "2156816c73038c"})
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={<r2=>0x0, ""/256, <r3=>0x0, <r4=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {}, {r3}, {r3}, {0x0, r4}, {}, {}, {}, {}, {r3, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {r3}, {}, {}, {}, {r2}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r2, r4}, {0x0, r4}, {r3, r4}, {}, {}, {}, {}, {}, {r3, r4}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {}, {r2}, {}, {r3, r4}, {r2, r4}, {0x0, r4}, {}, {}, {r3, r4}, {r3}, {}, {}, {r2}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {0x0, r4}, {r3}, {}, {}, {}, {}, {}, {r2, r4}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r2}, {}, {r2}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {}, {r3}, {}, {}, {r3}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r3, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r3, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r2, r4}, {}, {r2, r4}, {}, {r3}, {r3}, {r2}, {}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}], 0x0, "2156816c73038c"})
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa)

00:07:55 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000005000000190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  475.574836][T30458] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  475.574941][T30459] loop4: detected capacity change from 0 to 264192
[  475.584104][T30460] loop1: detected capacity change from 0 to 264192
[  475.609913][T30461] loop2: detected capacity change from 0 to 264192
00:07:55 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [], 0x0, "2156816c73038c"})
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={<r2=>0x0, ""/256, <r3=>0x0, <r4=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {}, {r3}, {r3}, {0x0, r4}, {}, {}, {}, {}, {r3, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {r3}, {}, {}, {}, {r2}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r2, r4}, {0x0, r4}, {r3, r4}, {}, {}, {}, {}, {}, {r3, r4}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {}, {r2}, {}, {r3, r4}, {r2, r4}, {0x0, r4}, {}, {}, {r3, r4}, {r3}, {}, {}, {r2}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {0x0, r4}, {r3}, {}, {}, {}, {}, {}, {r2, r4}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r2}, {}, {r2}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {}, {r3}, {}, {}, {r3}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r3, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r3, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r2, r4}, {}, {r2, r4}, {}, {r3}, {r3}, {r2}, {}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}], 0x0, "2156816c73038c"})
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa)

00:07:55 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000030010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  475.717501][T30465] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
00:07:55 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={<r2=>0x0, ""/256, <r3=>0x0, <r4=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {}, {r3}, {r3}, {0x0, r4}, {}, {}, {}, {}, {r3, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {r3}, {}, {}, {}, {r2}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r2, r4}, {0x0, r4}, {r3, r4}, {}, {}, {}, {}, {}, {r3, r4}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {}, {r2}, {}, {r3, r4}, {r2, r4}, {0x0, r4}, {}, {}, {r3, r4}, {r3}, {}, {}, {r2}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {0x0, r4}, {r3}, {}, {}, {}, {}, {}, {r2, r4}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r2}, {}, {r2}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {}, {r3}, {}, {}, {r3}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r3, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r3, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r2, r4}, {}, {r2, r4}, {}, {r3}, {r3}, {r2}, {}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0x5, "710ce82b173d12"})
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r5, 0x0, 0x8400fffffffa)

00:07:55 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000040010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  475.849949][T30467] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.5'.
[  475.916767][T30469] loop1: detected capacity change from 0 to 264192
[  476.004537][T30472] loop4: detected capacity change from 0 to 264192
[  476.004632][T30473] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
00:07:56 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [], 0x0, "2156816c73038c"})
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={<r2=>0x0, ""/256, <r3=>0x0, <r4=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {}, {r3}, {r3}, {0x0, r4}, {}, {}, {}, {}, {r3, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {r3}, {}, {}, {}, {r2}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r2, r4}, {0x0, r4}, {r3, r4}, {}, {}, {}, {}, {}, {r3, r4}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {}, {r2}, {}, {r3, r4}, {r2, r4}, {0x0, r4}, {}, {}, {r3, r4}, {r3}, {}, {}, {r2}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {0x0, r4}, {r3}, {}, {}, {}, {}, {}, {r2, r4}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r2}, {}, {r2}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {}, {r3}, {}, {}, {r3}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r3, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r3, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r2, r4}, {}, {r2, r4}, {}, {r3}, {r3}, {r2}, {}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}], 0x0, "2156816c73038c"})
ftruncate(r0, 0x800)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r5, 0x0, 0x8400fffffffa)

00:07:56 executing program 0:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{0x0}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  476.233165][T30475] loop1: detected capacity change from 0 to 264192
[  476.323978][T30477] loop0: detected capacity change from 0 to 264192
[  476.341361][T30477] FAT-fs (loop0): bogus number of reserved sectors
[  476.347958][T30477] FAT-fs (loop0): Can't find a valid FAT filesystem
00:07:56 executing program 3:
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:07:56 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={<r2=>0x0, ""/256, <r3=>0x0, <r4=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {}, {r3}, {r3}, {0x0, r4}, {}, {}, {}, {}, {r3, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {r3}, {}, {}, {}, {r2}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r2, r4}, {0x0, r4}, {r3, r4}, {}, {}, {}, {}, {}, {r3, r4}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {}, {r2}, {}, {r3, r4}, {r2, r4}, {0x0, r4}, {}, {}, {r3, r4}, {r3}, {}, {}, {r2}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {0x0, r4}, {r3}, {}, {}, {}, {}, {}, {r2, r4}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r2}, {}, {r2}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {}, {r3}, {}, {}, {r3}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r3, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r3, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r2, r4}, {}, {r2, r4}, {}, {r3}, {r3}, {r2}, {}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0x5, "710ce82b173d12"})
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r5, 0x0, 0x8400fffffffa)

00:07:56 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000055300)={0x0, ""/256, 0x0, <r1=>0x0})
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={<r3=>0x0, ""/256, <r4=>0x0, <r5=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {}, {r4}, {r4}, {0x0, r5}, {}, {}, {}, {}, {r4, r5}, {0x0, r5}, {}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3, r5}, {}, {}, {0x0, r5}, {r4, r5}, {}, {r3, r5}, {}, {}, {r4}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {r3, r5}, {}, {}, {}, {r4}, {r3}, {}, {r4}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {}, {0x0, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {r4}, {}, {}, {}, {r3}, {0x0, r5}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {}, {r3}, {0x0, r5}, {}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {}, {0x0, r5}, {}, {r3, r5}, {}, {}, {r3, r5}, {0x0, r5}, {r4, r5}, {}, {}, {}, {}, {}, {r4, r5}, {}, {r3}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {}, {}, {r3}, {}, {r4, r5}, {r3, r5}, {0x0, r5}, {}, {}, {r4, r5}, {r4}, {}, {}, {r3}, {}, {}, {}, {0x0, r5}, {}, {0x0, r5}, {0x0, r5}, {}, {0x0, r5}, {}, {0x0, r5}, {r4}, {}, {}, {}, {}, {}, {r3, r5}, {r4}, {}, {}, {}, {r4}, {0x0, r5}, {}, {}, {r3}, {r3}, {0x0, r5}, {r3}, {r4}, {}, {}, {}, {r3}, {0x0, r5}, {r4}, {0x0, r5}, {r3, r5}, {}, {0x0, r5}, {}, {}, {0x0, r5}, {}, {r3}, {}, {r3}, {r3}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {r3}, {}, {r3}, {r4}, {}, {r3, r5}, {}, {}, {}, {r4}, {0x0, r5}, {r3}, {}, {r4}, {}, {}, {r4}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {r4, r5}, {}, {0x0, r5}, {}, {r4, r5}, {r4, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {r3, r5}, {}, {r3, r5}, {}, {r4}, {r4}, {r3}, {}, {}, {}, {}, {}, {}, {r4}, {0x0, r5}], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r1}, {}, {0x0, r5}], 0x5, "710ce82b173d12"})
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r6, 0x0, 0x8400fffffffa)

00:07:56 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000180010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:07:56 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [], 0x0, "2156816c73038c"})
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={<r2=>0x0, ""/256, <r3=>0x0, <r4=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {}, {r3}, {r3}, {0x0, r4}, {}, {}, {}, {}, {r3, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {r3}, {}, {}, {}, {r2}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r2, r4}, {0x0, r4}, {r3, r4}, {}, {}, {}, {}, {}, {r3, r4}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {}, {r2}, {}, {r3, r4}, {r2, r4}, {0x0, r4}, {}, {}, {r3, r4}, {r3}, {}, {}, {r2}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {0x0, r4}, {r3}, {}, {}, {}, {}, {}, {r2, r4}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r2}, {}, {r2}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {}, {r3}, {}, {}, {r3}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r3, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r3, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r2, r4}, {}, {r2, r4}, {}, {r3}, {r3}, {r2}, {}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}], 0x0, "2156816c73038c"})
ftruncate(r0, 0x800)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r5, 0x0, 0x8400fffffffa)

00:07:56 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025020000190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  476.561885][T30483] loop2: detected capacity change from 0 to 264192
[  476.563442][T30482] loop4: detected capacity change from 0 to 264192
[  476.569523][T30485] loop1: detected capacity change from 0 to 264192
[  476.578363][T30484] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  476.589795][T30484] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.5'.
00:07:56 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [], 0x0, "2156816c73038c"})
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={<r2=>0x0, ""/256, <r3=>0x0, <r4=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {}, {r3}, {r3}, {0x0, r4}, {}, {}, {}, {}, {r3, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {r3}, {}, {}, {}, {r2}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r2, r4}, {0x0, r4}, {r3, r4}, {}, {}, {}, {}, {}, {r3, r4}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {}, {r2}, {}, {r3, r4}, {r2, r4}, {0x0, r4}, {}, {}, {r3, r4}, {r3}, {}, {}, {r2}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {0x0, r4}, {r3}, {}, {}, {}, {}, {}, {r2, r4}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r2}, {}, {r2}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {}, {r3}, {}, {}, {r3}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r3, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r3, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r2, r4}, {}, {r2, r4}, {}, {r3}, {r3}, {r2}, {}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}], 0x0, "2156816c73038c"})
ftruncate(r0, 0x800)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r5, 0x0, 0x8400fffffffa)

00:07:56 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025030000190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:07:56 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={<r2=>0x0, ""/256, <r3=>0x0, <r4=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {}, {r3}, {r3}, {0x0, r4}, {}, {}, {}, {}, {r3, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {r3}, {}, {}, {}, {r2}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r2, r4}, {0x0, r4}, {r3, r4}, {}, {}, {}, {}, {}, {r3, r4}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {}, {r2}, {}, {r3, r4}, {r2, r4}, {0x0, r4}, {}, {}, {r3, r4}, {r3}, {}, {}, {r2}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {0x0, r4}, {r3}, {}, {}, {}, {}, {}, {r2, r4}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r2}, {}, {r2}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {}, {r3}, {}, {}, {r3}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r3, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r3, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r2, r4}, {}, {r2, r4}, {}, {r3}, {r3}, {r2}, {}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0x5, "710ce82b173d12"})
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r5, 0x0, 0x8400fffffffa)

00:07:56 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000055300)={0x0, ""/256, 0x0, <r1=>0x0})
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={<r3=>0x0, ""/256, <r4=>0x0, <r5=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {}, {r4}, {r4}, {0x0, r5}, {}, {}, {}, {}, {r4, r5}, {0x0, r5}, {}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3, r5}, {}, {}, {0x0, r5}, {r4, r5}, {}, {r3, r5}, {}, {}, {r4}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {r3, r5}, {}, {}, {}, {r4}, {r3}, {}, {r4}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {}, {0x0, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {r4}, {}, {}, {}, {r3}, {0x0, r5}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {}, {r3}, {0x0, r5}, {}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {}, {0x0, r5}, {}, {r3, r5}, {}, {}, {r3, r5}, {0x0, r5}, {r4, r5}, {}, {}, {}, {}, {}, {r4, r5}, {}, {r3}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {}, {}, {r3}, {}, {r4, r5}, {r3, r5}, {0x0, r5}, {}, {}, {r4, r5}, {r4}, {}, {}, {r3}, {}, {}, {}, {0x0, r5}, {}, {0x0, r5}, {0x0, r5}, {}, {0x0, r5}, {}, {0x0, r5}, {r4}, {}, {}, {}, {}, {}, {r3, r5}, {r4}, {}, {}, {}, {r4}, {0x0, r5}, {}, {}, {r3}, {r3}, {0x0, r5}, {r3}, {r4}, {}, {}, {}, {r3}, {0x0, r5}, {r4}, {0x0, r5}, {r3, r5}, {}, {0x0, r5}, {}, {}, {0x0, r5}, {}, {r3}, {}, {r3}, {r3}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {r3}, {}, {r3}, {r4}, {}, {r3, r5}, {}, {}, {}, {r4}, {0x0, r5}, {r3}, {}, {r4}, {}, {}, {r4}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {r4, r5}, {}, {0x0, r5}, {}, {r4, r5}, {r4, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {r3, r5}, {}, {r3, r5}, {}, {r4}, {r4}, {r3}, {}, {}, {}, {}, {}, {}, {r4}, {0x0, r5}], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r1}, {}, {0x0, r5}], 0x5, "710ce82b173d12"})
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r6, 0x0, 0x8400fffffffa)

00:07:56 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025040000190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  476.868406][T30492] device Y­4��`Ò˜ left promiscuous mode
[  476.884053][T30493] loop1: detected capacity change from 0 to 264192
[  477.016777][T30497] loop4: detected capacity change from 0 to 264192
[  477.057401][T30499] loop2: detected capacity change from 0 to 264192
00:07:57 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [], 0x0, "2156816c73038c"})
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={<r2=>0x0, ""/256, <r3=>0x0, <r4=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {}, {r3}, {r3}, {0x0, r4}, {}, {}, {}, {}, {r3, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {r3}, {}, {}, {}, {r2}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r2, r4}, {0x0, r4}, {r3, r4}, {}, {}, {}, {}, {}, {r3, r4}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {}, {r2}, {}, {r3, r4}, {r2, r4}, {0x0, r4}, {}, {}, {r3, r4}, {r3}, {}, {}, {r2}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {0x0, r4}, {r3}, {}, {}, {}, {}, {}, {r2, r4}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r2}, {}, {r2}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {}, {r3}, {}, {}, {r3}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r3, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r3, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r2, r4}, {}, {r2, r4}, {}, {r3}, {r3}, {r2}, {}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}], 0x0, "2156816c73038c"})
lseek(r0, 0x200, 0x0)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r5, 0x0, 0x8400fffffffa)

00:07:57 executing program 0:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  477.214578][T30501] loop1: detected capacity change from 0 to 264192
[  477.313569][T30503] loop0: detected capacity change from 0 to 264192
[  477.357204][T30503] FAT-fs (loop0): bogus number of reserved sectors
[  477.363776][T30503] FAT-fs (loop0): Can't find a valid FAT filesystem
00:07:57 executing program 3:
syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:07:57 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000055300)={0x0, ""/256, 0x0, <r1=>0x0})
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r1}], 0x5, "710ce82b173d12"})
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x8400fffffffa)

00:07:57 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={<r2=>0x0, ""/256, <r3=>0x0, <r4=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {}, {r3}, {r3}, {0x0, r4}, {}, {}, {}, {}, {r3, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {r3}, {}, {}, {}, {r2}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r2, r4}, {0x0, r4}, {r3, r4}, {}, {}, {}, {}, {}, {r3, r4}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {}, {r2}, {}, {r3, r4}, {r2, r4}, {0x0, r4}, {}, {}, {r3, r4}, {r3}, {}, {}, {r2}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {0x0, r4}, {r3}, {}, {}, {}, {}, {}, {r2, r4}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r2}, {}, {r2}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {}, {r3}, {}, {}, {r3}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r3, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r3, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r2, r4}, {}, {r2, r4}, {}, {r3}, {r3}, {r2}, {}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0x5, "710ce82b173d12"})
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r5, 0x0, 0x8400fffffffa)

00:07:57 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025050000190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:07:57 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [], 0x0, "2156816c73038c"})
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={<r2=>0x0, ""/256, <r3=>0x0, <r4=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {}, {r3}, {r3}, {0x0, r4}, {}, {}, {}, {}, {r3, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {r3}, {}, {}, {}, {r2}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r2, r4}, {0x0, r4}, {r3, r4}, {}, {}, {}, {}, {}, {r3, r4}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {}, {r2}, {}, {r3, r4}, {r2, r4}, {0x0, r4}, {}, {}, {r3, r4}, {r3}, {}, {}, {r2}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {0x0, r4}, {r3}, {}, {}, {}, {}, {}, {r2, r4}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r2}, {}, {r2}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {}, {r3}, {}, {}, {r3}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r3, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r3, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r2, r4}, {}, {r2, r4}, {}, {r3}, {r3}, {r2}, {}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}], 0x0, "2156816c73038c"})
lseek(r0, 0x200, 0x0)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r5, 0x0, 0x8400fffffffa)

00:07:57 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025060000190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  477.573589][T30508] loop2: detected capacity change from 0 to 264192
[  477.575026][T30509] loop4: detected capacity change from 0 to 264192
[  477.581473][T30510] loop1: detected capacity change from 0 to 264192
00:07:57 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [], 0x0, "2156816c73038c"})
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={<r2=>0x0, ""/256, <r3=>0x0, <r4=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {}, {r3}, {r3}, {0x0, r4}, {}, {}, {}, {}, {r3, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {r3}, {}, {}, {}, {r2}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r2, r4}, {0x0, r4}, {r3, r4}, {}, {}, {}, {}, {}, {r3, r4}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {}, {r2}, {}, {r3, r4}, {r2, r4}, {0x0, r4}, {}, {}, {r3, r4}, {r3}, {}, {}, {r2}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {0x0, r4}, {r3}, {}, {}, {}, {}, {}, {r2, r4}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r2}, {}, {r2}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {}, {r3}, {}, {}, {r3}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r3, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r3, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r2, r4}, {}, {r2, r4}, {}, {r3}, {r3}, {r2}, {}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}], 0x0, "2156816c73038c"})
lseek(r0, 0x200, 0x0)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r5, 0x0, 0x8400fffffffa)

[  477.692771][T30513] loop3: detected capacity change from 0 to 264192
00:07:57 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025070000190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:07:57 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000055300)={0x0, ""/256, 0x0, <r1=>0x0})
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r1}], 0x5, "710ce82b173d12"})
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8400fffffffa)

00:07:57 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025080000190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  477.826747][T30517] loop1: detected capacity change from 0 to 264192
00:07:57 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [], 0x0, "2156816c73038c"})
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440))
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  477.992698][T30522] loop2: detected capacity change from 0 to 264192
00:07:58 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={<r2=>0x0, ""/256, <r3=>0x0, <r4=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {}, {r3}, {r3}, {0x0, r4}, {}, {}, {}, {}, {r3, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {r3}, {}, {}, {}, {r2}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r2, r4}, {0x0, r4}, {r3, r4}, {}, {}, {}, {}, {}, {r3, r4}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {}, {r2}, {}, {r3, r4}, {r2, r4}, {0x0, r4}, {}, {}, {r3, r4}, {r3}, {}, {}, {r2}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {0x0, r4}, {r3}, {}, {}, {}, {}, {}, {r2, r4}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r2}, {}, {r2}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {}, {r3}, {}, {}, {r3}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r3, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r3, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r2, r4}, {}, {r2, r4}, {}, {r3}, {r3}, {r2}, {}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0x5, "710ce82b173d12"})
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r5, 0x0, 0x8400fffffffa)

[  478.122256][T30525] loop1: detected capacity change from 0 to 264192
[  478.199074][T30527] loop4: detected capacity change from 0 to 264192
00:07:58 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000055300)={0x0, ""/256, 0x0, <r1=>0x0})
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r1}], 0x5, "710ce82b173d12"})
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8400fffffffa)

00:07:58 executing program 3:
syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:07:58 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025090000190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:07:58 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [], 0x0, "2156816c73038c"})
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:07:58 executing program 0:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:07:58 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={<r2=>0x0, ""/256, <r3=>0x0, <r4=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {}, {r3}, {r3}, {0x0, r4}, {}, {}, {}, {}, {r3, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {r3}, {}, {}, {}, {r2}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r2, r4}, {0x0, r4}, {r3, r4}, {}, {}, {}, {}, {}, {r3, r4}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {}, {r2}, {}, {r3, r4}, {r2, r4}, {0x0, r4}, {}, {}, {r3, r4}, {r3}, {}, {}, {r2}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {0x0, r4}, {r3}, {}, {}, {}, {}, {}, {r2, r4}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r2}, {}, {r2}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {}, {r3}, {}, {}, {r3}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r3, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r3, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r2, r4}, {}, {r2, r4}, {}, {r3}, {r3}, {r2}, {}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0x5, "710ce82b173d12"})
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r5, 0x0, 0x8400fffffffa)

[  478.662102][T30533] loop4: detected capacity change from 0 to 264192
[  478.662529][T30535] loop1: detected capacity change from 0 to 264192
[  478.668970][T30534] loop0: detected capacity change from 0 to 264192
[  478.687331][T30537] loop2: detected capacity change from 0 to 264192
[  478.705185][T30534] FAT-fs (loop0): bogus number of reserved sectors
00:07:58 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff010000000100000056000000250a0000190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  478.711788][T30534] FAT-fs (loop0): Can't find a valid FAT filesystem
00:07:58 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff010000000100000056000000250b0000190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  478.854624][T30542] loop3: detected capacity change from 0 to 264192
00:07:59 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff010000000100000056000000250c0000190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:07:59 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000055300)={0x0, ""/256, 0x0, <r1=>0x0})
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r1}], 0x5, "710ce82b173d12"})
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8400fffffffa)

00:07:59 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [], 0x0, "2156816c73038c"})
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:07:59 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff010000000100000056000000250d0000190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  479.052076][T30546] validate_nla: 10 callbacks suppressed
[  479.052091][T30546] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
00:07:59 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={<r2=>0x0, ""/256, <r3=>0x0, <r4=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {}, {r3}, {r3}, {0x0, r4}, {}, {}, {}, {}, {r3, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {r3}, {}, {}, {}, {r2}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r2, r4}, {0x0, r4}, {r3, r4}, {}, {}, {}, {}, {}, {r3, r4}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {}, {r2}, {}, {r3, r4}, {r2, r4}, {0x0, r4}, {}, {}, {r3, r4}, {r3}, {}, {}, {r2}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {0x0, r4}, {r3}, {}, {}, {}, {}, {}, {r2, r4}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r2}, {}, {r2}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {}, {r3}, {}, {}, {r3}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r3, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r3, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r2, r4}, {}, {r2, r4}, {}, {r3}, {r3}, {r2}, {}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0x5, "710ce82b173d12"})
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r5, 0x0, 0x8400fffffffa)

[  479.179646][T30549] loop2: detected capacity change from 0 to 264192
[  479.191605][T30550] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  479.243526][T30552] loop1: detected capacity change from 0 to 264192
[  479.317080][T30554] loop4: detected capacity change from 0 to 264192
00:07:59 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:07:59 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff010000000100000056000000250e0000190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:07:59 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000055300)={0x0, ""/256, 0x0, <r1=>0x0})
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r1}], 0x5, "710ce82b173d12"})
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x8400fffffffa)

00:07:59 executing program 3:
syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:07:59 executing program 0:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:07:59 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={<r2=>0x0, ""/256, <r3=>0x0, <r4=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {}, {r3}, {r3}, {0x0, r4}, {}, {}, {}, {}, {r3, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {r3}, {}, {}, {}, {r2}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r2, r4}, {0x0, r4}, {r3, r4}, {}, {}, {}, {}, {}, {r3, r4}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {}, {r2}, {}, {r3, r4}, {r2, r4}, {0x0, r4}, {}, {}, {r3, r4}, {r3}, {}, {}, {r2}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {0x0, r4}, {r3}, {}, {}, {}, {}, {}, {r2, r4}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r2}, {}, {r2}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {}, {r3}, {}, {}, {r3}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r3, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r3, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r2, r4}, {}, {r2, r4}, {}, {r3}, {r3}, {r2}, {}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0x5, "710ce82b173d12"})
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r5, 0x0, 0x8400fffffffa)

[  479.791246][T30560] loop0: detected capacity change from 0 to 264192
[  479.806465][T30562] loop2: detected capacity change from 0 to 264192
[  479.813198][T30561] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  479.816203][T30560] FAT-fs (loop0): bogus number of reserved sectors
[  479.827881][T30560] FAT-fs (loop0): Can't find a valid FAT filesystem
00:07:59 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025100000190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  479.840074][T30564] loop1: detected capacity change from 0 to 264192
[  479.846961][T30563] loop4: detected capacity change from 0 to 264192
00:08:00 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:00 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025110000190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  479.988249][T30567] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  480.006128][T30568] loop3: detected capacity change from 0 to 264192
00:08:00 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000055300)={0x0, ""/256, 0x0, <r1=>0x0})
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r1}], 0x5, "710ce82b173d12"})
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x8400fffffffa)

00:08:00 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025120000190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  480.159444][T30571] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  480.186476][T30572] loop1: detected capacity change from 0 to 264192
00:08:00 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:00 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={<r2=>0x0, ""/256, <r3=>0x0, <r4=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {}, {r3}, {r3}, {0x0, r4}, {}, {}, {}, {}, {r3, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {r3}, {}, {}, {}, {r2}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r2, r4}, {0x0, r4}, {r3, r4}, {}, {}, {}, {}, {}, {r3, r4}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {}, {r2}, {}, {r3, r4}, {r2, r4}, {0x0, r4}, {}, {}, {r3, r4}, {r3}, {}, {}, {r2}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {0x0, r4}, {r3}, {}, {}, {}, {}, {}, {r2, r4}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r2}, {}, {r2}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {}, {r3}, {}, {}, {r3}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r3, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r3, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r2, r4}, {}, {r2, r4}, {}, {r3}, {r3}, {r2}, {}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0x5, "710ce82b173d12"})
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r5, 0x0, 0x8400fffffffa)

00:08:00 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025250000190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  480.305798][T30575] loop2: detected capacity change from 0 to 264192
[  480.327113][T30576] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
00:08:00 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000055300)={0x0, ""/256, 0x0, <r1=>0x0})
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r1}], 0x5, "710ce82b173d12"})
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x8400fffffffa)

[  480.460832][T30580] loop4: detected capacity change from 0 to 264192
[  480.461731][T30581] loop1: detected capacity change from 0 to 264192
[  480.489247][T30582] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  480.610327][T30584] loop2: detected capacity change from 0 to 264192
00:08:00 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:00 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025480000190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:00 executing program 0:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400", 0xc}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:00 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000055300)={0x0, ""/256, 0x0, <r1=>0x0})
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r1}], 0x5, "710ce82b173d12"})
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x8400fffffffa)

00:08:00 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), 0x0, 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:00 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={<r2=>0x0, ""/256, <r3=>0x0, <r4=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {}, {r3}, {r3}, {0x0, r4}, {}, {}, {}, {}, {r3, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {r3}, {}, {}, {}, {r2}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r2, r4}, {0x0, r4}, {r3, r4}, {}, {}, {}, {}, {}, {r3, r4}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {}, {r2}, {}, {r3, r4}, {r2, r4}, {0x0, r4}, {}, {}, {r3, r4}, {r3}, {}, {}, {r2}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {0x0, r4}, {r3}, {}, {}, {}, {}, {}, {r2, r4}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r2}, {}, {r2}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {}, {r3}, {}, {}, {r3}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r3, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r3, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r2, r4}, {}, {r2, r4}, {}, {r3}, {r3}, {r2}, {}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0x5, "710ce82b173d12"})
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r5, 0x0, 0x8400fffffffa)

00:08:01 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff010000000100000056000000254c0000190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  480.952069][T30590] loop0: detected capacity change from 0 to 264192
[  480.958540][T30589] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  480.959063][T30591] loop1: detected capacity change from 0 to 264192
[  480.973880][T30593] loop2: detected capacity change from 0 to 264192
[  480.996468][T30594] loop4: detected capacity change from 0 to 264192
[  481.003544][T30590] FAT-fs (loop0): bogus number of reserved sectors
[  481.010153][T30590] FAT-fs (loop0): Can't find a valid FAT filesystem
00:08:01 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6900)
ftruncate(0xffffffffffffffff, 0x800)
lseek(0xffffffffffffffff, 0x200, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0x8400fffffffa)

00:08:01 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025600000190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  481.121732][T30597] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  481.133445][T30598] loop3: detected capacity change from 0 to 264192
00:08:01 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000055300))
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8400fffffffa)

00:08:01 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6900)
ftruncate(0xffffffffffffffff, 0x800)
lseek(0xffffffffffffffff, 0x200, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0x8400fffffffa)

00:08:01 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025680000190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  481.261746][T30601] loop1: detected capacity change from 0 to 264192
[  481.288221][T30602] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
00:08:01 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={<r2=>0x0, ""/256, <r3=>0x0, <r4=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {}, {r3}, {r3}, {0x0, r4}, {}, {}, {}, {}, {r3, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {r3}, {}, {}, {}, {r2}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r2, r4}, {0x0, r4}, {r3, r4}, {}, {}, {}, {}, {}, {r3, r4}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {}, {r2}, {}, {r3, r4}, {r2, r4}, {0x0, r4}, {}, {}, {r3, r4}, {r3}, {}, {}, {r2}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {0x0, r4}, {r3}, {}, {}, {}, {}, {}, {r2, r4}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r2}, {}, {r2}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {}, {r3}, {}, {}, {r3}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r3, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r3, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r2, r4}, {}, {r2, r4}, {}, {r3}, {r3}, {r2}, {}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0x5, "710ce82b173d12"})
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r5, 0x0, 0x8400fffffffa)

00:08:01 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff010000000100000056000000256c0000190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  481.446770][T30605] loop2: detected capacity change from 0 to 264192
[  481.526905][T30608] loop1: detected capacity change from 0 to 264192
[  481.609367][T30611] loop4: detected capacity change from 0 to 264192
00:08:01 executing program 0:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400", 0xc}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:01 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6900)
ftruncate(0xffffffffffffffff, 0x800)
lseek(0xffffffffffffffff, 0x200, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0x8400fffffffa)

[  481.837538][T30614] loop1: detected capacity change from 0 to 264192
00:08:02 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025740000190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:02 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000055300))
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8400fffffffa)

00:08:02 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), 0x0, 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:02 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:02 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={<r2=>0x0, ""/256, <r3=>0x0, <r4=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {}, {r3}, {r3}, {0x0, r4}, {}, {}, {}, {}, {r3, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {r3}, {}, {}, {}, {r2}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r2, r4}, {0x0, r4}, {r3, r4}, {}, {}, {}, {}, {}, {r3, r4}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {}, {r2}, {}, {r3, r4}, {r2, r4}, {0x0, r4}, {}, {}, {r3, r4}, {r3}, {}, {}, {r2}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {0x0, r4}, {r3}, {}, {}, {}, {}, {}, {r2, r4}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r2}, {}, {r2}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {}, {r3}, {}, {}, {r3}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r3, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r3, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r2, r4}, {}, {r2, r4}, {}, {r3}, {r3}, {r2}, {}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0x5, "710ce82b173d12"})
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r5, 0x0, 0x8400fffffffa)

[  481.935458][T30616] loop0: detected capacity change from 0 to 264192
[  481.957030][T30616] FAT-fs (loop0): bogus number of reserved sectors
[  481.963635][T30616] FAT-fs (loop0): Can't find a valid FAT filesystem
00:08:02 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025770000190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  482.021462][T30620] loop2: detected capacity change from 0 to 264192
[  482.030109][T30621] loop4: detected capacity change from 0 to 264192
[  482.079887][T30624] loop1: detected capacity change from 0 to 264192
00:08:02 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff010000000100000056000000257a0000190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  482.156331][T30626] loop3: detected capacity change from 0 to 264192
00:08:02 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000055300))
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ftruncate(0xffffffffffffffff, 0x800)
lseek(r0, 0x200, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8400fffffffa)

00:08:02 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000300190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:02 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000500190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:02 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={<r2=>0x0, ""/256, <r3=>0x0, <r4=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {}, {r3}, {r3}, {0x0, r4}, {}, {}, {}, {}, {r3, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {r3}, {}, {}, {}, {r2}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r2, r4}, {0x0, r4}, {r3, r4}, {}, {}, {}, {}, {}, {r3, r4}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {}, {r2}, {}, {r3, r4}, {r2, r4}, {0x0, r4}, {}, {}, {r3, r4}, {r3}, {}, {}, {r2}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {0x0, r4}, {r3}, {}, {}, {}, {}, {}, {r2, r4}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r2}, {}, {r2}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {}, {r3}, {}, {}, {r3}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r3, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r3, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r2, r4}, {}, {r2, r4}, {}, {r3}, {r3}, {r2}, {}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0x5, "710ce82b173d12"})
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r5, 0x0, 0x8400fffffffa)

[  482.397088][T30633] loop2: detected capacity change from 0 to 264192
[  482.609474][T30638] loop4: detected capacity change from 0 to 264192
00:08:02 executing program 0:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400", 0xc}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:02 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000055300))
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ftruncate(0xffffffffffffffff, 0x800)
lseek(r0, 0x200, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8400fffffffa)

00:08:02 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000600190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  482.823987][T30641] loop2: detected capacity change from 0 to 264192
00:08:03 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), 0x0, 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:03 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000700190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:03 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000055300))
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ftruncate(0xffffffffffffffff, 0x800)
lseek(r0, 0x200, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8400fffffffa)

00:08:03 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={<r2=>0x0, ""/256, <r3=>0x0, <r4=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {}, {r3}, {r3}, {0x0, r4}, {}, {}, {}, {}, {r3, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {r3}, {}, {}, {}, {r2}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r2, r4}, {0x0, r4}, {r3, r4}, {}, {}, {}, {}, {}, {r3, r4}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {}, {r2}, {}, {r3, r4}, {r2, r4}, {0x0, r4}, {}, {}, {r3, r4}, {r3}, {}, {}, {r2}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {0x0, r4}, {r3}, {}, {}, {}, {}, {}, {r2, r4}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r2}, {}, {r2}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {}, {r3}, {}, {}, {r3}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r3, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r3, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r2, r4}, {}, {r2, r4}, {}, {r3}, {r3}, {r2}, {}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0x5, "710ce82b173d12"})
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r5, 0x0, 0x8400fffffffa)

00:08:03 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  482.934293][T30644] loop0: detected capacity change from 0 to 264192
[  482.955309][T30644] FAT-fs (loop0): bogus number of reserved sectors
[  482.961897][T30644] FAT-fs (loop0): Can't find a valid FAT filesystem
00:08:03 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000900190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  483.068869][T30649] loop2: detected capacity change from 0 to 264192
[  483.093206][T30650] loop4: detected capacity change from 0 to 264192
00:08:03 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000055300))
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ftruncate(r0, 0x0)
lseek(r0, 0x200, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8400fffffffa)

[  483.146856][T30654] loop1: detected capacity change from 0 to 264192
[  483.172970][T30656] loop3: detected capacity change from 0 to 264192
00:08:03 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000a00190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:03 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={<r2=>0x0, ""/256, <r3=>0x0, <r4=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {}, {r3}, {r3}, {0x0, r4}, {}, {}, {}, {}, {r3, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {r3}, {}, {}, {}, {r2}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r2, r4}, {0x0, r4}, {r3, r4}, {}, {}, {}, {}, {}, {r3, r4}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {}, {r2}, {}, {r3, r4}, {r2, r4}, {0x0, r4}, {}, {}, {r3, r4}, {r3}, {}, {}, {r2}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {0x0, r4}, {r3}, {}, {}, {}, {}, {}, {r2, r4}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r2}, {}, {r2}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {}, {r3}, {}, {}, {r3}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r3, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r3, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r2, r4}, {}, {r2, r4}, {}, {r3}, {r3}, {r2}, {}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0x5, "710ce82b173d12"})
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r5, 0x0, 0x8400fffffffa)

[  483.383064][T30660] loop2: detected capacity change from 0 to 264192
[  483.466627][T30662] loop4: detected capacity change from 0 to 264192
00:08:03 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000b00190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:03 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000055300))
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ftruncate(r0, 0x0)
lseek(r0, 0x200, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8400fffffffa)

00:08:03 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={<r2=>0x0, ""/256, <r3=>0x0, <r4=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {}, {r3}, {r3}, {0x0, r4}, {}, {}, {}, {}, {r3, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {r3}, {}, {}, {}, {r2}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r2, r4}, {0x0, r4}, {r3, r4}, {}, {}, {}, {}, {}, {r3, r4}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {}, {r2}, {}, {r3, r4}, {r2, r4}, {0x0, r4}, {}, {}, {r3, r4}, {r3}, {}, {}, {r2}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {0x0, r4}, {r3}, {}, {}, {}, {}, {}, {r2, r4}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r2}, {}, {r2}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {}, {r3}, {}, {}, {r3}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r3, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r3, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r2, r4}, {}, {r2, r4}, {}, {r3}, {r3}, {r2}, {}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0x5, "710ce82b173d12"})
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r5, 0x0, 0x8400fffffffa)

[  483.817152][T30667] loop2: detected capacity change from 0 to 264192
[  483.817752][T30668] loop4: detected capacity change from 0 to 264192
00:08:04 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000c00190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:04 executing program 0:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200", 0x12}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:04 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000055300))
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ftruncate(r0, 0x0)
lseek(r0, 0x200, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8400fffffffa)

00:08:04 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:04 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:04 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [], 0x5, "710ce82b173d12"})
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8400fffffffa)

00:08:04 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000d00190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  484.066389][T30672] validate_nla: 12 callbacks suppressed
[  484.066401][T30672] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  484.066544][T30673] loop0: detected capacity change from 0 to 264192
[  484.095654][T30674] loop2: detected capacity change from 0 to 264192
[  484.106558][T30673] FAT-fs (loop0): invalid media value (0x00)
[  484.112595][T30673] FAT-fs (loop0): Can't find a valid FAT filesystem
00:08:04 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000055300))
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ftruncate(r0, 0x800)
lseek(0xffffffffffffffff, 0x200, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8400fffffffa)

00:08:04 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000e00190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  484.242343][T30678] FAT-fs (loop3): bogus number of reserved sectors
[  484.243722][T30679] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  484.249057][T30678] FAT-fs (loop3): Can't find a valid FAT filesystem
[  484.293840][T30681] loop1: detected capacity change from 0 to 264192
[  484.322379][T30682] loop4: detected capacity change from 0 to 264192
00:08:04 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025001100190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:04 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000055300))
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ftruncate(r0, 0x800)
lseek(0xffffffffffffffff, 0x200, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8400fffffffa)

[  484.389016][T30685] loop2: detected capacity change from 0 to 264192
[  484.414242][T30686] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
00:08:04 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025001200190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  484.529834][T30688] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
00:08:04 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025d41500190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  484.596135][T30690] loop2: detected capacity change from 0 to 264192
[  484.634724][T30692] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  484.734509][T30694] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
00:08:04 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000055300))
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ftruncate(r0, 0x800)
lseek(0xffffffffffffffff, 0x200, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8400fffffffa)

00:08:04 executing program 0:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200", 0x12}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  484.940968][T30696] loop2: detected capacity change from 0 to 264192
00:08:05 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [], 0x5, "710ce82b173d12"})
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8400fffffffa)

[  485.011944][T30698] loop0: detected capacity change from 0 to 264192
[  485.029513][T30698] FAT-fs (loop0): invalid media value (0x00)
[  485.035693][T30698] FAT-fs (loop0): Can't find a valid FAT filesystem
00:08:05 executing program 1:
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:05 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:05 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025002000190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:05 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000055300))
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x0, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8400fffffffa)

[  485.111548][T30700] loop4: detected capacity change from 0 to 264192
00:08:05 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025002500190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  485.193608][T30704] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  485.203235][T30705] loop2: detected capacity change from 0 to 264192
[  485.217341][T30706] FAT-fs (loop3): bogus number of reserved sectors
[  485.223883][T30706] FAT-fs (loop3): Can't find a valid FAT filesystem
00:08:05 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000055300))
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x0, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8400fffffffa)

00:08:05 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025004800190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  485.367185][T30710] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
00:08:05 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [], 0x5, "710ce82b173d12"})
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:05 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025004c00190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:05 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000055300))
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x0, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8400fffffffa)

[  485.465396][T30712] loop2: detected capacity change from 0 to 264192
[  485.504623][T30714] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  485.584646][T30716] loop4: detected capacity change from 0 to 264192
[  485.654318][T30718] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  485.706487][T30720] loop2: detected capacity change from 0 to 264192
00:08:05 executing program 0:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200", 0x12}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:05 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025006000190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  486.002118][T30724] loop0: detected capacity change from 0 to 264192
[  486.028458][T30724] FAT-fs (loop0): invalid media value (0x00)
[  486.034466][T30724] FAT-fs (loop0): Can't find a valid FAT filesystem
00:08:06 executing program 1:
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:06 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000055300))
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r2 = open(0x0, 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8400fffffffa)

00:08:06 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:06 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [], 0x5, "710ce82b173d12"})
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:06 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025006800190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:06 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025006c00190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  486.228495][T30730] loop2: detected capacity change from 0 to 264192
[  486.237501][T30732] loop4: detected capacity change from 0 to 264192
[  486.245475][T30729] FAT-fs (loop3): bogus number of reserved sectors
[  486.252125][T30729] FAT-fs (loop3): Can't find a valid FAT filesystem
00:08:06 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000055300))
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r2 = open(0x0, 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8400fffffffa)

00:08:06 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025007400190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:06 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025007700190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  486.492104][T30739] loop2: detected capacity change from 0 to 264192
00:08:06 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [], 0x5, "710ce82b173d12"})
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  486.700330][T30744] loop4: detected capacity change from 0 to 264192
00:08:06 executing program 0:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400", 0x15}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:06 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000055300))
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r2 = open(0x0, 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8400fffffffa)

00:08:06 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025007a00190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  486.897075][T30747] loop2: detected capacity change from 0 to 264192
[  487.005241][T30750] loop0: detected capacity change from 0 to 264192
[  487.026157][T30750] FAT-fs (loop0): invalid media value (0x00)
[  487.032205][T30750] FAT-fs (loop0): Can't find a valid FAT filesystem
00:08:07 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000055300))
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r2, 0x0, 0x8400fffffffa)

00:08:07 executing program 1:
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:07 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff0100000001000000560000002515d400190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:07 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:07 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [], 0x5, "710ce82b173d12"})
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8400fffffffa)

00:08:07 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000200190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  487.251129][T30757] loop2: detected capacity change from 0 to 264192
[  487.255415][T30755] loop4: detected capacity change from 0 to 264192
00:08:07 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000055300))
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r2, 0x0, 0x8400fffffffa)

00:08:07 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000300190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  487.450450][T30764] loop2: detected capacity change from 0 to 264192
00:08:07 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000400190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:07 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000055300))
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r2, 0x0, 0x8400fffffffa)

00:08:07 executing program 0:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400", 0x15}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:07 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000500190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:07 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [], 0x5, "710ce82b173d12"})
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8400fffffffa)

[  487.882506][T30773] loop4: detected capacity change from 0 to 264192
[  487.883131][T30774] loop2: detected capacity change from 0 to 264192
[  488.012266][T30776] loop0: detected capacity change from 0 to 264192
[  488.030761][T30776] FAT-fs (loop0): invalid media value (0x00)
[  488.036921][T30776] FAT-fs (loop0): Can't find a valid FAT filesystem
00:08:08 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000055300))
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa)

00:08:08 executing program 1:
syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:08 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000600190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:08 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:08 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [], 0x5, "710ce82b173d12"})
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8400fffffffa)

00:08:08 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000700190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  488.243278][T30780] loop2: detected capacity change from 0 to 264192
00:08:08 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000055300))
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa)

00:08:08 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000800190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  488.359901][T30786] loop1: detected capacity change from 0 to 264192
[  488.376499][T30787] loop4: detected capacity change from 0 to 264192
00:08:08 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000900190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  488.498860][T30791] loop2: detected capacity change from 0 to 264192
00:08:08 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000055300))
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa)

00:08:08 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000a00190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:08 executing program 0:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400", 0x15}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:08 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [], 0x5, "710ce82b173d12"})
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8400fffffffa)

[  488.886398][T30798] loop2: detected capacity change from 0 to 264192
[  488.904079][T30800] loop4: detected capacity change from 0 to 264192
[  489.012202][T30802] loop0: detected capacity change from 0 to 264192
[  489.025574][T30802] FAT-fs (loop0): invalid media value (0x00)
[  489.031716][T30802] FAT-fs (loop0): Can't find a valid FAT filesystem
00:08:09 executing program 1:
syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:09 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000b00190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:09 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000055300))
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x0)

00:08:09 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:09 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [], 0x5, "710ce82b173d12"})
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8400fffffffa)

00:08:09 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000c00190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:09 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000055300))
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x0)

[  489.256254][T30806] validate_nla: 16 callbacks suppressed
[  489.256267][T30806] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  489.284757][T30807] loop2: detected capacity change from 0 to 264192
[  489.367744][T30810] loop4: detected capacity change from 0 to 264192
00:08:09 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000d00190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  489.417348][T30812] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  489.472340][T30814] loop1: detected capacity change from 0 to 264192
00:08:09 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000055300))
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x0)

[  489.531589][T30816] loop2: detected capacity change from 0 to 264192
[  489.568302][T30818] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
00:08:09 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000e00190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  489.693995][T30820] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  489.753234][T30822] loop2: detected capacity change from 0 to 264192
00:08:09 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8400fffffffa)

00:08:09 executing program 0:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f8", 0x16}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  489.892303][T30824] loop4: detected capacity change from 0 to 264192
[  489.971740][T30826] loop0: detected capacity change from 0 to 264192
[  489.983253][T30826] FAT-fs (loop0): bogus number of FAT sectors
[  489.989394][T30826] FAT-fs (loop0): Can't find a valid FAT filesystem
00:08:10 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [], 0x5, "710ce82b173d12"})
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8400fffffffa)

00:08:10 executing program 1:
syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:10 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x0, &(0x7f0000000300), 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:10 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ftruncate(0xffffffffffffffff, 0x800)
lseek(r0, 0x200, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8400fffffffa)

00:08:10 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025001000190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  490.395270][T30831] loop4: detected capacity change from 0 to 264192
[  490.396798][T30832] loop2: detected capacity change from 0 to 264192
[  490.410785][T30834] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  490.414022][T30833] loop3: detected capacity change from 0 to 264192
00:08:10 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025001100190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:10 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ftruncate(0xffffffffffffffff, 0x800)
lseek(r0, 0x200, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8400fffffffa)

[  490.447878][T30833] FAT-fs (loop3): bogus number of reserved sectors
[  490.454464][T30833] FAT-fs (loop3): Can't find a valid FAT filesystem
00:08:10 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025001200190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  490.557035][T30836] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  490.592787][T30838] loop1: detected capacity change from 0 to 264192
00:08:10 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025002500190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:10 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ftruncate(0xffffffffffffffff, 0x800)
lseek(r0, 0x200, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8400fffffffa)

[  490.686441][T30841] loop4: detected capacity change from 0 to 264192
[  490.709085][T30842] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
00:08:10 executing program 0:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f8", 0x16}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:10 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [], 0x5, "710ce82b173d12"})
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:10 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025004800190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  490.839211][T30844] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  490.929304][T30846] loop4: detected capacity change from 0 to 264192
[  490.973549][T30849] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  490.994188][T30850] loop0: detected capacity change from 0 to 264192
[  491.022202][T30850] FAT-fs (loop0): bogus number of FAT sectors
[  491.028344][T30850] FAT-fs (loop0): Can't find a valid FAT filesystem
[  491.075364][T30852] loop2: detected capacity change from 0 to 264192
00:08:11 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025004c00190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:11 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ftruncate(r0, 0x0)
lseek(r0, 0x200, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8400fffffffa)

00:08:11 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [], 0x5, "710ce82b173d12"})
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:11 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), 0x0, 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:11 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x0, &(0x7f0000000300), 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  491.517359][T30857] loop4: detected capacity change from 0 to 264192
[  491.526287][T30858] loop3: detected capacity change from 0 to 264192
[  491.526399][T30859] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  491.547782][T30860] loop2: detected capacity change from 0 to 264192
00:08:11 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025006000190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:11 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ftruncate(r0, 0x0)
lseek(r0, 0x200, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8400fffffffa)

[  491.562404][T30858] FAT-fs (loop3): bogus number of reserved sectors
[  491.568949][T30858] FAT-fs (loop3): Can't find a valid FAT filesystem
00:08:11 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025006800190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  491.718755][T30864] loop1: detected capacity change from 0 to 264192
00:08:11 executing program 0:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f8", 0x16}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:11 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ftruncate(r0, 0x0)
lseek(r0, 0x200, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8400fffffffa)

[  491.805160][T30866] loop4: detected capacity change from 0 to 264192
00:08:11 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025006c00190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:11 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [], 0x5, "710ce82b173d12"})
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:12 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025007400190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  491.990620][T30872] loop0: detected capacity change from 0 to 264192
[  492.017886][T30872] FAT-fs (loop0): bogus number of FAT sectors
[  492.024073][T30872] FAT-fs (loop0): Can't find a valid FAT filesystem
[  492.045829][T30874] loop4: detected capacity change from 0 to 264192
[  492.120084][T30877] loop2: detected capacity change from 0 to 264192
00:08:12 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025007700190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:12 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ftruncate(r0, 0x800)
lseek(0xffffffffffffffff, 0x200, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8400fffffffa)

00:08:12 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), 0x0, 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:12 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x0, &(0x7f0000000300), 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:12 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [], 0x5, "710ce82b173d12"})
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa)

00:08:12 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025007a00190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  492.599318][T30884] loop3: detected capacity change from 0 to 264192
[  492.606248][T30885] loop4: detected capacity change from 0 to 264192
[  492.613213][T30886] loop2: detected capacity change from 0 to 264192
[  492.635744][T30884] FAT-fs (loop3): bogus number of reserved sectors
[  492.642288][T30884] FAT-fs (loop3): Can't find a valid FAT filesystem
00:08:12 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ftruncate(r0, 0x800)
lseek(0xffffffffffffffff, 0x200, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8400fffffffa)

[  492.709189][T30888] loop1: detected capacity change from 0 to 264192
00:08:12 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [], 0x5, "710ce82b173d12"})
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa)

00:08:12 executing program 0:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, 0x0)
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:12 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000003190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:12 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000005190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  492.876065][T30894] loop4: detected capacity change from 0 to 264192
[  492.887538][T30896] loop2: detected capacity change from 0 to 264192
00:08:12 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ftruncate(r0, 0x800)
lseek(0xffffffffffffffff, 0x200, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8400fffffffa)

00:08:13 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [], 0x5, "710ce82b173d12"})
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa)

00:08:13 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000006190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  492.997594][T30899] loop0: detected capacity change from 0 to 264192
[  493.105332][T30903] loop4: detected capacity change from 0 to 264192
[  493.112332][T30904] loop2: detected capacity change from 0 to 264192
00:08:13 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), 0x0, 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:13 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x0, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8400fffffffa)

00:08:13 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [], 0x5, "710ce82b173d12"})
ftruncate(r0, 0x800)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:13 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000007190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:13 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{0x0}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  493.584053][T30911] loop3: detected capacity change from 0 to 264192
[  493.590294][T30912] loop2: detected capacity change from 0 to 264192
[  493.590997][T30914] loop4: detected capacity change from 0 to 264192
00:08:13 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000009190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  493.653814][T30911] FAT-fs (loop3): bogus number of reserved sectors
[  493.660406][T30911] FAT-fs (loop3): Can't find a valid FAT filesystem
[  493.697465][T30916] loop1: detected capacity change from 0 to 264192
00:08:13 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [], 0x5, "710ce82b173d12"})
ftruncate(r0, 0x800)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:13 executing program 0:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, 0x0)
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:13 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x0, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8400fffffffa)

00:08:13 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff0100000001000000560000002500000a190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:13 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff0100000001000000560000002500000b190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  493.920001][T30923] loop2: detected capacity change from 0 to 264192
[  493.943158][T30924] loop4: detected capacity change from 0 to 264192
00:08:14 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x0, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8400fffffffa)

00:08:14 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [], 0x5, "710ce82b173d12"})
ftruncate(r0, 0x800)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  494.091368][T30928] loop0: detected capacity change from 0 to 264192
[  494.161242][T30931] loop4: detected capacity change from 0 to 264192
[  494.165325][T30932] loop2: detected capacity change from 0 to 264192
00:08:14 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:14 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff0100000001000000560000002500000c190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:14 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r2 = open(0x0, 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8400fffffffa)

00:08:14 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [], 0x5, "710ce82b173d12"})
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:14 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{0x0}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:14 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff0100000001000000560000002500000d190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  494.574603][T30937] validate_nla: 13 callbacks suppressed
[  494.574617][T30937] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  494.578961][T30938] loop4: detected capacity change from 0 to 264192
[  494.580609][T30939] loop2: detected capacity change from 0 to 264192
[  494.603841][T30940] loop3: detected capacity change from 0 to 264192
[  494.635022][T30940] FAT-fs (loop3): bogus number of reserved sectors
[  494.641761][T30940] FAT-fs (loop3): Can't find a valid FAT filesystem
[  494.738214][T30943] FAT-fs (loop1): bogus number of reserved sectors
[  494.744736][T30943] FAT-fs (loop1): Can't find a valid FAT filesystem
[  494.757279][T30944] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
00:08:15 executing program 0:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, 0x0)
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:15 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [], 0x5, "710ce82b173d12"})
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:15 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r2 = open(0x0, 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8400fffffffa)

00:08:15 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff0100000001000000560000002500000e190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:15 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000011190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  495.033029][T30948] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  495.033854][T30949] loop2: detected capacity change from 0 to 264192
[  495.057021][T30950] loop4: detected capacity change from 0 to 264192
00:08:15 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r2 = open(0x0, 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8400fffffffa)

[  495.171045][T30952] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  495.224218][T30954] loop0: detected capacity change from 0 to 264192
[  495.294018][T30956] loop4: detected capacity change from 0 to 264192
00:08:15 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:15 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [], 0x5, "710ce82b173d12"})
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:15 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000012190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:15 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r2, 0x0, 0x8400fffffffa)

00:08:15 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{0x0}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  495.617190][T30962] loop2: detected capacity change from 0 to 264192
[  495.618568][T30961] loop3: detected capacity change from 0 to 264192
[  495.635208][T30963] loop4: detected capacity change from 0 to 264192
[  495.643166][T30964] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  495.644700][T30961] FAT-fs (loop3): bogus number of reserved sectors
[  495.657909][T30961] FAT-fs (loop3): Can't find a valid FAT filesystem
00:08:15 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [], 0x0, "2156816c73038c"})
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  495.718235][T30966] FAT-fs (loop1): bogus number of reserved sectors
[  495.724774][T30966] FAT-fs (loop1): Can't find a valid FAT filesystem
[  495.879807][T30969] loop2: detected capacity change from 0 to 264192
00:08:16 executing program 0:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(0x0)
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:16 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r2, 0x0, 0x8400fffffffa)

00:08:16 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff0100000001000000560000002500d415190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:16 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000020190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:16 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [], 0x0, "2156816c73038c"})
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:16 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r2, 0x0, 0x8400fffffffa)

[  496.151448][T30972] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  496.151606][T30973] loop4: detected capacity change from 0 to 264192
[  496.305733][T30976] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  496.335425][T30978] loop0: detected capacity change from 0 to 264192
[  496.346396][T30979] loop2: detected capacity change from 0 to 264192
[  496.397194][T30981] loop4: detected capacity change from 0 to 264192
00:08:16 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000025190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:16 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa)

00:08:16 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:16 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  496.611859][T30985] loop3: detected capacity change from 0 to 264192
[  496.611871][T30986] loop4: detected capacity change from 0 to 264192
[  496.612885][T30987] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
00:08:16 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000048190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:16 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa)

[  496.652890][T30985] FAT-fs (loop3): bogus number of reserved sectors
[  496.659514][T30985] FAT-fs (loop3): Can't find a valid FAT filesystem
[  496.759885][T30989] FAT-fs (loop1): bogus number of reserved sectors
[  496.766426][T30989] FAT-fs (loop1): Can't find a valid FAT filesystem
[  496.790436][T30991] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  496.868687][T30993] loop4: detected capacity change from 0 to 264192
00:08:17 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:17 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff0100000001000000560000002500004c190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:17 executing program 0:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(0x0)
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:17 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa)

00:08:17 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000060190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  497.216753][T30998] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  497.217589][T30997] loop4: detected capacity change from 0 to 264192
[  497.225418][T30999] loop2: detected capacity change from 0 to 264192
00:08:17 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x0)

00:08:17 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000068190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  497.401242][T31003] loop0: detected capacity change from 0 to 264192
00:08:17 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  497.484608][T31005] loop4: detected capacity change from 0 to 264192
00:08:17 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x0)

00:08:17 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff0100000001000000560000002500006c190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:17 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:17 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  497.603584][T31009] loop3: detected capacity change from 0 to 264192
[  497.635467][T31009] FAT-fs (loop3): bogus number of reserved sectors
[  497.642210][T31009] FAT-fs (loop3): Can't find a valid FAT filesystem
00:08:17 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000074190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  497.742645][T31014] loop4: detected capacity change from 0 to 264192
[  497.752144][T31016] loop2: detected capacity change from 0 to 264192
00:08:17 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x0)

[  497.949160][T31021] loop4: detected capacity change from 0 to 264192
00:08:18 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000077190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:18 executing program 0:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(0x0)
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:18 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [], 0x5, "710ce82b173d12"})
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8400fffffffa)

00:08:18 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:18 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff0100000001000000560000002500007a190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  498.282547][T31025] loop4: detected capacity change from 0 to 264192
[  498.285226][T31027] loop2: detected capacity change from 0 to 264192
00:08:18 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:18 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff010000000100000056000000250015d4190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  498.444438][T31031] loop0: detected capacity change from 0 to 264192
00:08:18 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000030010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:18 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  498.613451][T31035] loop3: detected capacity change from 0 to 264192
[  498.627806][T31035] FAT-fs (loop3): bogus number of reserved sectors
[  498.634424][T31035] FAT-fs (loop3): Can't find a valid FAT filesystem
00:08:18 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000180010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  498.683153][T31037] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.5'.
00:08:18 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [], 0x5, "710ce82b173d12"})
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8400fffffffa)

00:08:18 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:18 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000002190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  498.815127][T31041] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.5'.
00:08:18 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000003190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  498.987709][T31046] loop2: detected capacity change from 0 to 264192
[  498.995312][T31047] loop4: detected capacity change from 0 to 264192
00:08:19 executing program 0:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:19 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000004190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:19 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000005190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:19 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400", 0xc}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:19 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000006190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:19 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  499.492382][T31055] loop0: detected capacity change from 0 to 264192
00:08:19 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [], 0x5, "710ce82b173d12"})
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8400fffffffa)

00:08:19 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:19 executing program 0:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:19 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000007190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  499.594150][T31058] validate_nla: 12 callbacks suppressed
[  499.594160][T31058] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  499.624960][T31059] loop3: detected capacity change from 0 to 264192
[  499.652045][T31059] FAT-fs (loop3): bogus number of reserved sectors
[  499.658619][T31059] FAT-fs (loop3): Can't find a valid FAT filesystem
[  499.701005][T31063] loop2: detected capacity change from 0 to 264192
[  499.722781][T31064] loop4: detected capacity change from 0 to 264192
[  499.738194][T31065] loop0: detected capacity change from 0 to 264192
00:08:19 executing program 0:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:19 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000008190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  499.781010][T31067] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
00:08:20 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000009190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  499.929143][T31071] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
00:08:20 executing program 0:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  499.998012][T31073] loop0: detected capacity change from 0 to 264192
00:08:20 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff0100000001000000560000002500000a190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  500.074863][T31075] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  500.173200][T31077] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  500.230541][T31079] loop0: detected capacity change from 0 to 264192
00:08:20 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff0100000001000000560000002500000b190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:20 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:20 executing program 0:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:20 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  500.505938][T31084] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  500.506569][T31085] loop0: detected capacity change from 0 to 264192
[  500.530113][T31087] loop2: detected capacity change from 0 to 264192
[  500.530172][T31086] loop4: detected capacity change from 0 to 264192
00:08:20 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x0, &(0x7f0000000300), 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:20 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400", 0xc}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:20 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff0100000001000000560000002500000c190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:20 executing program 0:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:20 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:20 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff0100000001000000560000002500000d190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  500.739570][T31090] loop3: detected capacity change from 0 to 264192
[  500.739990][T31091] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  500.789667][T31090] FAT-fs (loop3): bogus number of reserved sectors
[  500.796275][T31090] FAT-fs (loop3): Can't find a valid FAT filesystem
[  500.837250][T31093] loop0: detected capacity change from 0 to 264192
00:08:20 executing program 0:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:21 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff0100000001000000560000002500000e190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  500.889762][T31098] loop1: detected capacity change from 0 to 264192
[  500.901118][T31099] loop2: detected capacity change from 0 to 264192
[  500.908547][T31100] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  500.924772][T31098] FAT-fs (loop1): bogus number of reserved sectors
[  500.931443][T31098] FAT-fs (loop1): Can't find a valid FAT filesystem
00:08:21 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:21 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000010190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:21 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  501.050641][T31102] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
00:08:21 executing program 0:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  501.099273][T31104] loop0: detected capacity change from 0 to 264192
[  501.204828][T31107] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  501.241344][T31109] loop4: detected capacity change from 0 to 264192
[  501.259649][T31110] loop2: detected capacity change from 0 to 264192
[  501.332583][T31112] loop0: detected capacity change from 0 to 264192
00:08:21 executing program 0:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:21 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000011190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:21 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:21 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400", 0xc}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:21 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:21 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x0, &(0x7f0000000300), 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:21 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000012190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  501.778584][T31117] loop2: detected capacity change from 0 to 264192
[  501.788002][T31119] loop3: detected capacity change from 0 to 264192
[  501.792056][T31120] loop0: detected capacity change from 0 to 264192
[  501.822850][T31119] FAT-fs (loop3): bogus number of reserved sectors
[  501.829415][T31119] FAT-fs (loop3): Can't find a valid FAT filesystem
00:08:21 executing program 0:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(0xffffffffffffffff, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  501.881651][T31122] loop4: detected capacity change from 0 to 264192
00:08:22 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000025190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  501.934919][T31125] loop1: detected capacity change from 0 to 264192
[  501.964605][T31125] FAT-fs (loop1): bogus number of reserved sectors
[  501.971210][T31125] FAT-fs (loop1): Can't find a valid FAT filesystem
[  502.062221][T31128] loop0: detected capacity change from 0 to 264192
00:08:22 executing program 0:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(0xffffffffffffffff, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:22 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000048190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:22 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff0100000001000000560000002500004c190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:22 executing program 0:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(0xffffffffffffffff, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  502.283821][T31134] loop0: detected capacity change from 0 to 264192
00:08:22 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000060190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:22 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  502.495520][T31140] loop0: detected capacity change from 0 to 264192
[  502.563423][T31142] loop2: detected capacity change from 0 to 264192
00:08:22 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:22 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200", 0x12}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  502.687570][T31144] loop4: detected capacity change from 0 to 264192
00:08:22 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000068190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:22 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x0, &(0x7f0000000300), 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:22 executing program 0:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x0)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  502.758263][T31146] loop3: detected capacity change from 0 to 264192
[  502.796369][T31146] FAT-fs (loop3): invalid media value (0x00)
[  502.802418][T31146] FAT-fs (loop3): Can't find a valid FAT filesystem
00:08:22 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff0100000001000000560000002500006c190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:22 executing program 0:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x0)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  502.843329][T31150] loop0: detected capacity change from 0 to 264192
00:08:23 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000074190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:23 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  502.959361][T31153] loop1: detected capacity change from 0 to 264192
[  502.989513][T31153] FAT-fs (loop1): bogus number of reserved sectors
[  502.996146][T31153] FAT-fs (loop1): Can't find a valid FAT filesystem
00:08:23 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000077190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:23 executing program 0:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x0)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  503.092894][T31157] loop0: detected capacity change from 0 to 264192
00:08:23 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  503.193371][T31160] loop2: detected capacity change from 0 to 264192
00:08:23 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff0100000001000000560000002500007a190010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  503.334450][T31165] loop0: detected capacity change from 0 to 264192
[  503.345201][T31166] loop4: detected capacity change from 0 to 264192
00:08:23 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200", 0x12}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:23 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000030010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  503.650886][T31170] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.5'.
00:08:23 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{0x0}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:23 executing program 0:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(0xffffffffffffffff, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:23 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:23 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000040010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:23 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa)

[  503.732750][T31172] loop3: detected capacity change from 0 to 264192
[  503.756755][T31172] FAT-fs (loop3): invalid media value (0x00)
[  503.762817][T31172] FAT-fs (loop3): Can't find a valid FAT filesystem
00:08:23 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000180010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  503.846542][T31177] loop4: detected capacity change from 0 to 264192
[  503.847081][T31178] loop0: detected capacity change from 0 to 264192
[  503.868354][T31180] loop2: detected capacity change from 0 to 264192
00:08:23 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa)

00:08:24 executing program 0:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(0xffffffffffffffff, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  503.941625][T31182] loop1: detected capacity change from 0 to 264192
[  503.975494][T31182] FAT-fs (loop1): bogus number of reserved sectors
[  503.982100][T31182] FAT-fs (loop1): Can't find a valid FAT filesystem
00:08:24 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190003000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  504.045641][T31184] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.5'.
00:08:24 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  504.161531][T31187] loop0: detected capacity change from 0 to 264192
[  504.161882][T31188] loop4: detected capacity change from 0 to 264192
[  504.336864][T31192] loop2: detected capacity change from 0 to 264192
00:08:24 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200", 0x12}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:24 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190005000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  504.611294][T31194] validate_nla: 13 callbacks suppressed
[  504.611307][T31194] netlink: 'syz-executor.5': attribute type 5 has an invalid length.
[  504.691989][T31196] loop3: detected capacity change from 0 to 264192
[  504.723466][T31196] FAT-fs (loop3): invalid media value (0x00)
[  504.729540][T31196] FAT-fs (loop3): Can't find a valid FAT filesystem
00:08:24 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(0xffffffffffffffff, 0x800)
lseek(0xffffffffffffffff, 0x200, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0x8400fffffffa)

00:08:24 executing program 0:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(0xffffffffffffffff, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:24 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa)

00:08:24 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{0x0}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:24 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190006000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:24 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190007000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:24 executing program 0:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x0, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  504.823559][T31201] loop4: detected capacity change from 0 to 264192
[  504.824697][T31202] loop0: detected capacity change from 0 to 264192
[  504.846286][T31204] loop2: detected capacity change from 0 to 264192
00:08:24 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:24 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(0xffffffffffffffff, 0x800)
lseek(0xffffffffffffffff, 0x200, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0x8400fffffffa)

00:08:25 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190009000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  504.973186][T31207] loop1: detected capacity change from 0 to 264192
[  505.000308][T31207] FAT-fs (loop1): bogus number of reserved sectors
[  505.006844][T31207] FAT-fs (loop1): Can't find a valid FAT filesystem
[  505.096882][T31213] loop0: detected capacity change from 0 to 264192
[  505.115504][T31214] loop4: detected capacity change from 0 to 264192
[  505.126933][T31215] loop2: detected capacity change from 0 to 264192
00:08:25 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400", 0x15}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:25 executing program 0:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x0, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:25 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:25 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff0100000001000000560000002500000019000a000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:25 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(0xffffffffffffffff, 0x800)
lseek(0xffffffffffffffff, 0x200, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0x8400fffffffa)

[  505.573998][T31222] loop2: detected capacity change from 0 to 264192
[  505.574348][T31223] loop4: detected capacity change from 0 to 264192
[  505.585925][T31221] netlink: 'syz-executor.5': attribute type 10 has an invalid length.
[  505.597193][T31224] loop0: detected capacity change from 0 to 264192
[  505.694965][T31227] loop3: detected capacity change from 0 to 264192
[  505.720158][T31227] FAT-fs (loop3): invalid media value (0x00)
[  505.726206][T31227] FAT-fs (loop3): Can't find a valid FAT filesystem
00:08:25 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:25 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff0100000001000000560000002500000019000b000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:25 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:25 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{0x0}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:25 executing program 0:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x0, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:25 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff0100000001000000560000002500000019000c000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  505.864655][T31233] loop4: detected capacity change from 0 to 264192
[  505.874155][T31234] loop2: detected capacity change from 0 to 264192
00:08:25 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  505.909958][T31235] loop0: detected capacity change from 0 to 264192
[  506.010954][T31239] loop1: detected capacity change from 0 to 264192
[  506.033808][T31239] FAT-fs (loop1): bogus number of reserved sectors
[  506.040411][T31239] FAT-fs (loop1): Can't find a valid FAT filesystem
[  506.136971][T31241] loop4: detected capacity change from 0 to 264192
00:08:26 executing program 0:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:26 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff0100000001000000560000002500000019000d000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:26 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:26 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400", 0x15}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:26 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff0100000001000000560000002500000019000e000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  506.572835][T31245] loop0: detected capacity change from 0 to 264192
[  506.583722][T31246] loop4: detected capacity change from 0 to 264192
[  506.590709][T31247] netlink: 'syz-executor.5': attribute type 13 has an invalid length.
00:08:26 executing program 0:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:26 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:26 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  506.669509][T31249] loop3: detected capacity change from 0 to 264192
[  506.684493][T31249] FAT-fs (loop3): invalid media value (0x00)
[  506.690561][T31249] FAT-fs (loop3): Can't find a valid FAT filesystem
00:08:26 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:26 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190210000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  506.835530][T31254] loop0: detected capacity change from 0 to 264192
[  506.847123][T31255] loop4: detected capacity change from 0 to 264192
00:08:26 executing program 0:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:26 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:27 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190310000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  506.935843][T31258] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.5'.
[  506.956250][T31259] loop2: detected capacity change from 0 to 264192
[  507.040686][T31262] loop1: detected capacity change from 0 to 264192
[  507.068791][T31262] FAT-fs (loop1): bogus number of reserved sectors
[  507.075332][T31262] FAT-fs (loop1): Can't find a valid FAT filesystem
[  507.089328][T31264] loop0: detected capacity change from 0 to 264192
[  507.107822][T31266] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.5'.
00:08:27 executing program 0:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x8400fffffffa)

00:08:27 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190410000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  507.135163][T31267] loop4: detected capacity change from 0 to 264192
[  507.241861][T31269] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.5'.
[  507.299227][T31271] loop0: detected capacity change from 0 to 264192
00:08:27 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190510000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:27 executing program 0:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x8400fffffffa)

00:08:27 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400", 0x15}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:27 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  507.548037][T31275] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.5'.
[  507.549504][T31274] loop0: detected capacity change from 0 to 264192
[  507.686657][T31278] loop3: detected capacity change from 0 to 264192
[  507.692877][T31279] loop4: detected capacity change from 0 to 264192
[  507.718352][T31278] FAT-fs (loop3): invalid media value (0x00)
[  507.724425][T31278] FAT-fs (loop3): Can't find a valid FAT filesystem
00:08:27 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190610000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:27 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:27 executing program 0:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x8400fffffffa)

00:08:27 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:27 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190710000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  507.838529][T31281] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.5'.
00:08:28 executing program 0:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa)

00:08:28 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190810000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  507.931883][T31283] loop0: detected capacity change from 0 to 264192
[  507.963998][T31285] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.5'.
[  508.020937][T31288] loop2: detected capacity change from 0 to 264192
[  508.054320][T31289] loop1: detected capacity change from 0 to 264192
00:08:28 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  508.081638][T31289] FAT-fs (loop1): bogus number of reserved sectors
[  508.088218][T31289] FAT-fs (loop1): Can't find a valid FAT filesystem
00:08:28 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190910000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  508.134275][T31291] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.5'.
[  508.182833][T31293] loop0: detected capacity change from 0 to 264192
[  508.275272][T31296] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.5'.
[  508.291064][T31297] loop4: detected capacity change from 0 to 264192
00:08:28 executing program 0:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa)

00:08:28 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190a10000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:28 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f8", 0x16}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:28 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  508.571273][T31301] loop0: detected capacity change from 0 to 264192
[  508.572748][T31302] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.5'.
[  508.578513][T31303] loop4: detected capacity change from 0 to 264192
[  508.675570][T31305] loop3: detected capacity change from 0 to 264192
[  508.711481][T31305] FAT-fs (loop3): bogus number of FAT sectors
[  508.717570][T31305] FAT-fs (loop3): Can't find a valid FAT filesystem
00:08:28 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190b10000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:28 executing program 0:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa)

00:08:28 executing program 2:
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:28 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:28 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:28 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190c10000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  508.907510][T31309] loop0: detected capacity change from 0 to 264192
00:08:28 executing program 0:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x0)

[  508.948237][T31311] loop4: detected capacity change from 0 to 264192
00:08:29 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:29 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190d10000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  509.057443][T31315] __nla_validate_parse: 1 callbacks suppressed
[  509.057457][T31315] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.5'.
[  509.083916][T31317] loop1: detected capacity change from 0 to 264192
[  509.106004][T31317] FAT-fs (loop1): bogus number of reserved sectors
[  509.112649][T31317] FAT-fs (loop1): Can't find a valid FAT filesystem
00:08:29 executing program 0:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x0)

[  509.154208][T31319] loop0: detected capacity change from 0 to 264192
[  509.214692][T31321] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.5'.
[  509.266441][T31323] loop4: detected capacity change from 0 to 264192
[  509.368696][T31325] loop0: detected capacity change from 0 to 264192
00:08:29 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190e10000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:29 executing program 0:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x0)

00:08:29 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f8", 0x16}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:29 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000191010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  509.566038][T31328] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.5'.
[  509.575716][T31329] loop0: detected capacity change from 0 to 264192
[  509.674686][T31331] loop3: detected capacity change from 0 to 264192
[  509.702585][T31331] FAT-fs (loop3): bogus number of FAT sectors
[  509.708704][T31331] FAT-fs (loop3): Can't find a valid FAT filesystem
[  509.749304][T31333] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.5'.
00:08:29 executing program 2:
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:29 executing program 0:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:29 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:29 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400", 0xc}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:29 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000191110000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:30 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000191210000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  509.969469][T31337] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.5'.
[  509.970344][T31339] loop0: detected capacity change from 0 to 264192
[  509.979435][T31338] loop4: detected capacity change from 0 to 264192
00:08:30 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000192510000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  510.114220][T31344] loop1: detected capacity change from 0 to 264192
[  510.133713][T31344] FAT-fs (loop1): bogus number of reserved sectors
[  510.140384][T31344] FAT-fs (loop1): Can't find a valid FAT filesystem
[  510.150610][T31345] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.5'.
00:08:30 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000194810000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  510.248695][T31347] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.5'.
00:08:30 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000194c10000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:30 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  510.381562][T31349] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.5'.
00:08:30 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f8", 0x16}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:30 executing program 0:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={<r2=>0x0, ""/256, <r3=>0x0, <r4=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {}, {r3}, {r3}, {0x0, r4}, {}, {}, {}, {}, {r3, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {r3}, {}, {}, {}, {r2}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r2, r4}, {0x0, r4}, {r3, r4}, {}, {}, {}, {}, {}, {r3, r4}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {}, {r2}, {}, {r3, r4}, {r2, r4}, {0x0, r4}, {}, {}, {r3, r4}, {r3}, {}, {}, {r2}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {0x0, r4}, {r3}, {}, {}, {}, {}, {}, {r2, r4}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r2}, {}, {r2}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {}, {r3}, {}, {}, {r3}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r3, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r3, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r2, r4}, {}, {r2, r4}, {}, {r3}, {r3}, {r2}, {}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0x5, "710ce82b173d12"})
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r5, 0x0, 0x8400fffffffa)

[  510.529653][T31351] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.5'.
[  510.633133][T31353] loop4: detected capacity change from 0 to 264192
[  510.693352][T31355] loop3: detected capacity change from 0 to 264192
[  510.714616][T31355] FAT-fs (loop3): bogus number of FAT sectors
[  510.720782][T31355] FAT-fs (loop3): Can't find a valid FAT filesystem
[  510.740737][T31357] loop0: detected capacity change from 0 to 264192
00:08:30 executing program 2:
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:30 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000196010000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:31 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400", 0xc}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:31 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:31 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000196810000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  510.985173][T31359] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.5'.
00:08:31 executing program 0:
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:31 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000196c10000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  511.099621][T31363] loop1: detected capacity change from 0 to 264192
[  511.124271][T31363] FAT-fs (loop1): bogus number of reserved sectors
[  511.130826][T31363] FAT-fs (loop1): Can't find a valid FAT filesystem
[  511.187144][T31367] loop4: detected capacity change from 0 to 264192
00:08:31 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000197410000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:31 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x800)
lseek(0xffffffffffffffff, 0x200, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0x8400fffffffa)

00:08:31 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000197710000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:31 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, 0x0)
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:31 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000197a10000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  511.598380][T31377] loop4: detected capacity change from 0 to 264192
[  511.697692][T31381] loop3: detected capacity change from 0 to 264192
00:08:32 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x800)
lseek(0xffffffffffffffff, 0x200, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0x8400fffffffa)

00:08:32 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190011000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:32 executing program 2:
syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:32 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400", 0xc}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:32 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190012000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  511.996223][T31384] loop4: detected capacity change from 0 to 264192
[  511.996435][T31385] netlink: 'syz-executor.5': attribute type 17 has an invalid length.
[  512.112399][T31389] loop2: detected capacity change from 0 to 264192
[  512.128902][T31390] loop1: detected capacity change from 0 to 264192
[  512.148536][T31390] FAT-fs (loop1): bogus number of reserved sectors
[  512.155077][T31390] FAT-fs (loop1): Can't find a valid FAT filesystem
00:08:32 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x800)
lseek(0xffffffffffffffff, 0x200, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0x8400fffffffa)

00:08:32 executing program 0:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={<r2=>0x0, ""/256, <r3=>0x0, <r4=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {}, {r3}, {r3}, {0x0, r4}, {}, {}, {}, {}, {r3, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {r3}, {}, {}, {}, {r2}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r2, r4}, {0x0, r4}, {r3, r4}, {}, {}, {}, {}, {}, {r3, r4}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {}, {r2}, {}, {r3, r4}, {r2, r4}, {0x0, r4}, {}, {}, {r3, r4}, {r3}, {}, {}, {r2}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {0x0, r4}, {r3}, {}, {}, {}, {}, {}, {r2, r4}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r2}, {}, {r2}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {}, {r3}, {}, {}, {r3}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r3, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r3, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r2, r4}, {}, {r2, r4}, {}, {r3}, {r3}, {r2}, {}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0x5, "710ce82b173d12"})
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r5, 0x0, 0x8400fffffffa)

00:08:32 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190013000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:32 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  512.265508][T31393] loop4: detected capacity change from 0 to 264192
00:08:32 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190029000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  512.311081][T31395] netlink: 'syz-executor.5': attribute type 19 has an invalid length.
[  512.400062][T31397] loop0: detected capacity change from 0 to 264192
[  512.467149][T31399] netlink: 'syz-executor.5': attribute type 41 has an invalid length.
[  512.525480][T31401] loop4: detected capacity change from 0 to 264192
00:08:32 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190039000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:32 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, 0x0)
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:32 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190064000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:32 executing program 0:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000055300)={0x0, ""/256, 0x0, <r1=>0x0})
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r1}], 0x5, "710ce82b173d12"})
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8400fffffffa)

[  512.829297][T31407] loop3: detected capacity change from 0 to 264192
[  512.915749][T31409] loop0: detected capacity change from 0 to 264192
00:08:33 executing program 2:
syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:33 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190002000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:33 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200", 0x12}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:33 executing program 0:
syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:33 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190003000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  513.118253][T31413] loop1: detected capacity change from 0 to 264192
[  513.142014][T31413] FAT-fs (loop1): invalid media value (0x00)
[  513.148080][T31413] FAT-fs (loop1): Can't find a valid FAT filesystem
00:08:33 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  513.249889][T31417] loop0: detected capacity change from 0 to 264192
[  513.284128][T31419] loop2: detected capacity change from 0 to 264192
00:08:33 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:33 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190005000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  513.378345][T31421] netlink: 'syz-executor.5': attribute type 4 has an invalid length.
00:08:33 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190006000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  513.495721][T31423] netlink: 'syz-executor.5': attribute type 5 has an invalid length.
[  513.569944][T31425] loop4: detected capacity change from 0 to 264192
00:08:33 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, 0x0)
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:33 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190007000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:33 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190008000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  513.956600][T31433] loop3: detected capacity change from 0 to 264192
00:08:34 executing program 2:
syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:34 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190009000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:34 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200", 0x12}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:34 executing program 0:
syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:34 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff0100000001000000560000002500000019000a000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  514.216487][T31436] loop1: detected capacity change from 0 to 264192
[  514.229225][T31436] FAT-fs (loop1): invalid media value (0x00)
[  514.235231][T31436] FAT-fs (loop1): Can't find a valid FAT filesystem
00:08:34 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff0100000001000000560000002500000019000b000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  514.351377][T31439] netlink: 'syz-executor.5': attribute type 10 has an invalid length.
00:08:34 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  514.414297][T31442] loop2: detected capacity change from 0 to 264192
[  514.423033][T31443] loop0: detected capacity change from 0 to 264192
00:08:34 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff0100000001000000560000002500000019000c000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:34 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff0100000001000000560000002500000019000d000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  514.633889][T31449] loop4: detected capacity change from 0 to 264192
[  514.734707][T31451] netlink: 'syz-executor.5': attribute type 13 has an invalid length.
00:08:34 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(0x0)
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:34 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff0100000001000000560000002500000019000e000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:34 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190011000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  515.009021][T31456] netlink: 'syz-executor.5': attribute type 17 has an invalid length.
[  515.022993][T31457] loop3: detected capacity change from 0 to 264192
00:08:35 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), 0x0, 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:35 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190012000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:35 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200", 0x12}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:35 executing program 0:
syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:35 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190013000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  515.347845][T31460] loop1: detected capacity change from 0 to 264192
[  515.362349][T31460] FAT-fs (loop1): invalid media value (0x00)
[  515.368380][T31460] FAT-fs (loop1): Can't find a valid FAT filesystem
00:08:35 executing program 4:
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:35 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190029000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  515.482483][T31465] netlink: 'syz-executor.5': attribute type 19 has an invalid length.
[  515.494714][T31467] loop2: detected capacity change from 0 to 264192
[  515.494765][T31466] loop0: detected capacity change from 0 to 264192
00:08:35 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190039000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  515.609723][T31469] netlink: 'syz-executor.5': attribute type 41 has an invalid length.
00:08:35 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190064000500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:35 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000300000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:35 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(0x0)
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:36 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010020500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  516.065281][T31480] loop3: detected capacity change from 0 to 264192
00:08:36 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), 0x0, 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:36 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010030500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:36 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400", 0x15}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:36 executing program 0:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000055300)={0x0, ""/256, 0x0, <r1=>0x0})
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r1}], 0x5, "710ce82b173d12"})
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8400fffffffa)

00:08:36 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010040500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  516.395025][T31485] loop1: detected capacity change from 0 to 264192
[  516.407888][T31485] FAT-fs (loop1): invalid media value (0x00)
[  516.413995][T31485] FAT-fs (loop1): Can't find a valid FAT filesystem
00:08:36 executing program 4:
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:36 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010050500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  516.495810][T31488] loop2: detected capacity change from 0 to 264192
00:08:36 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010060500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  516.605148][T31491] loop0: detected capacity change from 0 to 264192
00:08:36 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010070500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:36 executing program 0:
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:36 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010080500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:36 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(0x0)
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  517.078849][T31505] loop3: detected capacity change from 0 to 264192
00:08:37 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010090500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:37 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), 0x0, 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:37 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400", 0x15}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:37 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff010000000100000056000000250000001900100a0500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  517.384998][T31508] loop1: detected capacity change from 0 to 264192
[  517.407813][T31508] FAT-fs (loop1): invalid media value (0x00)
[  517.413953][T31508] FAT-fs (loop1): Can't find a valid FAT filesystem
00:08:37 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff010000000100000056000000250000001900100b0500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:37 executing program 4:
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  517.487605][T31512] loop2: detected capacity change from 0 to 264192
00:08:37 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff010000000100000056000000250000001900100c0500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:37 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff010000000100000056000000250000001900100d0500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:37 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff010000000100000056000000250000001900100e0500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:37 executing program 0:
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:37 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010100500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:37 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:38 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010110500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  518.075482][T31529] loop3: detected capacity change from 0 to 264192
00:08:38 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010120500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:38 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:38 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:38 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400", 0x15}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  518.371389][T31536] loop3: detected capacity change from 0 to 264192
[  518.385346][T31537] loop1: detected capacity change from 0 to 264192
[  518.408238][T31537] FAT-fs (loop1): invalid media value (0x00)
[  518.414259][T31537] FAT-fs (loop1): Can't find a valid FAT filesystem
00:08:38 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010250500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:38 executing program 4:
syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:38 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  518.488993][T31539] FAT-fs (loop2): bogus number of reserved sectors
[  518.495599][T31539] FAT-fs (loop2): Can't find a valid FAT filesystem
00:08:38 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010480500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  518.601470][T31543] loop3: detected capacity change from 0 to 264192
[  518.670875][T31545] loop4: detected capacity change from 0 to 264192
00:08:38 executing program 0:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000055300)={0x0, ""/256, 0x0, <r1=>0x0})
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={<r3=>0x0, ""/256, <r4=>0x0, <r5=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {}, {r4}, {r4}, {0x0, r5}, {}, {}, {}, {}, {r4, r5}, {0x0, r5}, {}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3, r5}, {}, {}, {0x0, r5}, {r4, r5}, {}, {r3, r5}, {}, {}, {r4}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {r3, r5}, {}, {}, {}, {r4}, {r3}, {}, {r4}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {}, {0x0, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {r4}, {}, {}, {}, {r3}, {0x0, r5}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {}, {r3}, {0x0, r5}, {}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {}, {0x0, r5}, {}, {r3, r5}, {}, {}, {r3, r5}, {0x0, r5}, {r4, r5}, {}, {}, {}, {}, {}, {r4, r5}, {}, {r3}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {}, {}, {r3}, {}, {r4, r5}, {r3, r5}, {0x0, r5}, {}, {}, {r4, r5}, {r4}, {}, {}, {r3}, {}, {}, {}, {0x0, r5}, {}, {0x0, r5}, {0x0, r5}, {}, {0x0, r5}, {}, {0x0, r5}, {r4}, {}, {}, {}, {}, {}, {r3, r5}, {r4}, {}, {}, {}, {r4}, {0x0, r5}, {}, {}, {r3}, {r3}, {0x0, r5}, {r3}, {r4}, {}, {}, {}, {r3}, {0x0, r5}, {r4}, {0x0, r5}, {r3, r5}, {}, {0x0, r5}, {}, {}, {0x0, r5}, {}, {r3}, {}, {r3}, {r3}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {r3}, {}, {r3}, {r4}, {}, {r3, r5}, {}, {}, {}, {r4}, {0x0, r5}, {r3}, {}, {r4}, {}, {}, {r4}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {r4, r5}, {}, {0x0, r5}, {}, {r4, r5}, {r4, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {r3, r5}, {}, {r3, r5}, {}, {r4}, {r4}, {r3}, {}, {}, {}, {}, {}, {}, {r4}, {0x0, r5}], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r1}, {}, {0x0, r5}], 0x5, "710ce82b173d12"})
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r6, 0x0, 0x8400fffffffa)

00:08:38 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:38 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff010000000100000056000000250000001900104c0500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:38 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010600500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:38 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  518.862444][T31550] loop3: detected capacity change from 0 to 264192
00:08:39 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010680500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  518.972382][T31554] loop0: detected capacity change from 0 to 264192
[  519.088819][T31557] loop3: detected capacity change from 0 to 264192
00:08:39 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff010000000100000056000000250000001900106c0500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:39 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:39 executing program 0:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000055300)={0x0, ""/256, 0x0, <r1=>0x0})
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={<r3=>0x0, ""/256, <r4=>0x0, <r5=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {}, {r4}, {r4}, {0x0, r5}, {}, {}, {}, {}, {r4, r5}, {0x0, r5}, {}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3, r5}, {}, {}, {0x0, r5}, {r4, r5}, {}, {r3, r5}, {}, {}, {r4}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {r3, r5}, {}, {}, {}, {r4}, {r3}, {}, {r4}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {}, {0x0, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {r4}, {}, {}, {}, {r3}, {0x0, r5}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {}, {r3}, {0x0, r5}, {}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {}, {0x0, r5}, {}, {r3, r5}, {}, {}, {r3, r5}, {0x0, r5}, {r4, r5}, {}, {}, {}, {}, {}, {r4, r5}, {}, {r3}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {}, {}, {r3}, {}, {r4, r5}, {r3, r5}, {0x0, r5}, {}, {}, {r4, r5}, {r4}, {}, {}, {r3}, {}, {}, {}, {0x0, r5}, {}, {0x0, r5}, {0x0, r5}, {}, {0x0, r5}, {}, {0x0, r5}, {r4}, {}, {}, {}, {}, {}, {r3, r5}, {r4}, {}, {}, {}, {r4}, {0x0, r5}, {}, {}, {r3}, {r3}, {0x0, r5}, {r3}, {r4}, {}, {}, {}, {r3}, {0x0, r5}, {r4}, {0x0, r5}, {r3, r5}, {}, {0x0, r5}, {}, {}, {0x0, r5}, {}, {r3}, {}, {r3}, {r3}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {r3}, {}, {r3}, {r4}, {}, {r3, r5}, {}, {}, {}, {r4}, {0x0, r5}, {r3}, {}, {r4}, {}, {}, {r4}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {r4, r5}, {}, {0x0, r5}, {}, {r4, r5}, {r4, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {r3, r5}, {}, {r3, r5}, {}, {r4}, {r4}, {r3}, {}, {}, {}, {}, {}, {}, {r4}, {0x0, r5}], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r1}, {}, {0x0, r5}], 0x5, "710ce82b173d12"})
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r6, 0x0, 0x8400fffffffa)

[  519.366489][T31564] loop3: detected capacity change from 0 to 264192
[  519.373728][T31565] loop0: detected capacity change from 0 to 264192
00:08:39 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f8", 0x16}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:39 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:39 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:39 executing program 4:
syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:39 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010740500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:39 executing program 0:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000055300)={0x0, ""/256, 0x0, <r1=>0x0})
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={<r3=>0x0, ""/256, <r4=>0x0, <r5=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {}, {r4}, {r4}, {0x0, r5}, {}, {}, {}, {}, {r4, r5}, {0x0, r5}, {}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3, r5}, {}, {}, {0x0, r5}, {r4, r5}, {}, {r3, r5}, {}, {}, {r4}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {r3, r5}, {}, {}, {}, {r4}, {r3}, {}, {r4}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {}, {0x0, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {r4}, {}, {}, {}, {r3}, {0x0, r5}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {}, {r3}, {0x0, r5}, {}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {}, {0x0, r5}, {}, {r3, r5}, {}, {}, {r3, r5}, {0x0, r5}, {r4, r5}, {}, {}, {}, {}, {}, {r4, r5}, {}, {r3}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {}, {}, {r3}, {}, {r4, r5}, {r3, r5}, {0x0, r5}, {}, {}, {r4, r5}, {r4}, {}, {}, {r3}, {}, {}, {}, {0x0, r5}, {}, {0x0, r5}, {0x0, r5}, {}, {0x0, r5}, {}, {0x0, r5}, {r4}, {}, {}, {}, {}, {}, {r3, r5}, {r4}, {}, {}, {}, {r4}, {0x0, r5}, {}, {}, {r3}, {r3}, {0x0, r5}, {r3}, {r4}, {}, {}, {}, {r3}, {0x0, r5}, {r4}, {0x0, r5}, {r3, r5}, {}, {0x0, r5}, {}, {}, {0x0, r5}, {}, {r3}, {}, {r3}, {r3}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {r3}, {}, {r3}, {r4}, {}, {r3, r5}, {}, {}, {}, {r4}, {0x0, r5}, {r3}, {}, {r4}, {}, {}, {r4}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {r4, r5}, {}, {0x0, r5}, {}, {r4, r5}, {r4, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {r3, r5}, {}, {r3, r5}, {}, {r4}, {r4}, {r3}, {}, {}, {}, {}, {}, {}, {r4}, {0x0, r5}], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r1}, {}, {0x0, r5}], 0x5, "710ce82b173d12"})
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r6, 0x0, 0x8400fffffffa)

00:08:39 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010770500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  519.613552][T31572] loop3: detected capacity change from 0 to 264192
[  519.623068][T31571] FAT-fs (loop2): bogus number of reserved sectors
[  519.629613][T31571] FAT-fs (loop2): Can't find a valid FAT filesystem
[  519.637927][T31573] loop1: detected capacity change from 0 to 264192
[  519.650020][T31573] FAT-fs (loop1): bogus number of FAT sectors
[  519.656111][T31573] FAT-fs (loop1): Can't find a valid FAT filesystem
00:08:39 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:39 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff010000000100000056000000250000001900107a0500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  519.801918][T31578] loop4: detected capacity change from 0 to 264192
[  519.820333][T31579] loop0: detected capacity change from 0 to 264192
[  519.906447][T31581] loop3: detected capacity change from 0 to 264192
00:08:40 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000600000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:40 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:40 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000700000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  520.066910][T31585] validate_nla: 1 callbacks suppressed
[  520.066924][T31585] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  520.129517][T31587] loop3: detected capacity change from 0 to 264192
[  520.185895][T31589] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
00:08:40 executing program 0:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000055300)={0x0, ""/256, 0x0, <r1=>0x0})
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={<r3=>0x0, ""/256, <r4=>0x0, <r5=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {}, {r4}, {r4}, {0x0, r5}, {}, {}, {}, {}, {r4, r5}, {0x0, r5}, {}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3, r5}, {}, {}, {0x0, r5}, {r4, r5}, {}, {r3, r5}, {}, {}, {r4}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {r3, r5}, {}, {}, {}, {r4}, {r3}, {}, {r4}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {}, {0x0, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {r4}, {}, {}, {}, {r3}, {0x0, r5}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {}, {r3}, {0x0, r5}, {}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {}, {0x0, r5}, {}, {r3, r5}, {}, {}, {r3, r5}, {0x0, r5}, {r4, r5}, {}, {}, {}, {}, {}, {r4, r5}, {}, {r3}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {}, {}, {r3}, {}, {r4, r5}, {r3, r5}, {0x0, r5}, {}, {}, {r4, r5}, {r4}, {}, {}, {r3}, {}, {}, {}, {0x0, r5}, {}, {0x0, r5}, {0x0, r5}, {}, {0x0, r5}, {}, {0x0, r5}, {r4}, {}, {}, {}, {}, {}, {r3, r5}, {r4}, {}, {}, {}, {r4}, {0x0, r5}, {}, {}, {r3}, {r3}, {0x0, r5}, {r3}, {r4}, {}, {}, {}, {r3}, {0x0, r5}, {r4}, {0x0, r5}, {r3, r5}, {}, {0x0, r5}, {}, {}, {0x0, r5}, {}, {r3}, {}, {r3}, {r3}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {r3}, {}, {r3}, {r4}, {}, {r3, r5}, {}, {}, {}, {r4}, {0x0, r5}, {r3}, {}, {r4}, {}, {}, {r4}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {r4, r5}, {}, {0x0, r5}, {}, {r4, r5}, {r4, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {r3, r5}, {}, {r3, r5}, {}, {r4}, {r4}, {r3}, {}, {}, {}, {}, {}, {}, {r4}, {0x0, r5}], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r1}, {}, {0x0, r5}], 0x5, "710ce82b173d12"})
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r6, 0x0, 0x8400fffffffa)

00:08:40 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f8", 0x16}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  520.516248][T31591] loop0: detected capacity change from 0 to 264192
[  520.601429][T31593] loop1: detected capacity change from 0 to 264192
[  520.622582][T31593] FAT-fs (loop1): bogus number of FAT sectors
[  520.628726][T31593] FAT-fs (loop1): Can't find a valid FAT filesystem
00:08:40 executing program 4:
syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:40 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000900000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:40 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:40 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(0xffffffffffffffff, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:40 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010002500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:40 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000600000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  520.733786][T31597] loop3: detected capacity change from 0 to 264192
[  520.747285][T31598] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
00:08:40 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(0xffffffffffffffff, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  520.786441][T31599] FAT-fs (loop2): bogus number of reserved sectors
[  520.793002][T31599] FAT-fs (loop2): Can't find a valid FAT filesystem
00:08:40 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000300000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  520.887322][T31601] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  520.930769][T31603] loop4: detected capacity change from 0 to 264192
[  520.995700][T31607] netlink: 'syz-executor.0': attribute type 16 has an invalid length.
[  520.998021][T31608] loop3: detected capacity change from 0 to 264192
00:08:41 executing program 0:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={<r2=>0x0, ""/256, <r3=>0x0, <r4=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {}, {r3}, {r3}, {0x0, r4}, {}, {}, {}, {}, {r3, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {r3}, {}, {}, {}, {r2}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r2, r4}, {0x0, r4}, {r3, r4}, {}, {}, {}, {}, {}, {r3, r4}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {}, {r2}, {}, {r3, r4}, {r2, r4}, {0x0, r4}, {}, {}, {r3, r4}, {r3}, {}, {}, {r2}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {0x0, r4}, {r3}, {}, {}, {}, {}, {}, {r2, r4}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r2}, {}, {r2}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {}, {r3}, {}, {}, {r3}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r3, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r3, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r2, r4}, {}, {r2, r4}, {}, {r3}, {r3}, {r2}, {}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0x5, "710ce82b173d12"})
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r5, 0x0, 0x8400fffffffa)

00:08:41 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000400000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:41 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(0xffffffffffffffff, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  521.041142][T31609] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  521.125024][T31611] loop0: detected capacity change from 0 to 264192
[  521.200335][T31613] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  521.229481][T31615] loop3: detected capacity change from 0 to 264192
00:08:41 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f8", 0x16}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  521.542665][T31617] loop1: detected capacity change from 0 to 264192
[  521.559495][T31617] FAT-fs (loop1): bogus number of FAT sectors
[  521.565607][T31617] FAT-fs (loop1): Can't find a valid FAT filesystem
00:08:41 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x0)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:41 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000600000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:41 executing program 0:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={<r2=>0x0, ""/256, <r3=>0x0, <r4=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {}, {r3}, {r3}, {0x0, r4}, {}, {}, {}, {}, {r3, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {r3}, {}, {}, {}, {r2}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r2, r4}, {0x0, r4}, {r3, r4}, {}, {}, {}, {}, {}, {r3, r4}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {}, {r2}, {}, {r3, r4}, {r2, r4}, {0x0, r4}, {}, {}, {r3, r4}, {r3}, {}, {}, {r2}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {0x0, r4}, {r3}, {}, {}, {}, {}, {}, {r2, r4}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r2}, {}, {r2}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {}, {r3}, {}, {}, {r3}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r3, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r3, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r2, r4}, {}, {r2, r4}, {}, {r3}, {r3}, {r2}, {}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0x5, "710ce82b173d12"})
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r5, 0x0, 0x8400fffffffa)

00:08:41 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), 0x0, 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:41 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x0, 0x0, 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  521.852316][T31625] loop0: detected capacity change from 0 to 264192
[  521.852346][T31622] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  521.861771][T31623] loop3: detected capacity change from 0 to 264192
00:08:41 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x0)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:41 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000700000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  521.990608][T31627] loop4: detected capacity change from 0 to 264192
00:08:42 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000900000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  522.055375][T31629] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  522.116333][T31631] loop3: detected capacity change from 0 to 264192
00:08:42 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x0)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:42 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010002500000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  522.205264][T31633] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
00:08:42 executing program 0:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={<r2=>0x0, ""/256, <r3=>0x0, <r4=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {}, {r3}, {r3}, {0x0, r4}, {}, {}, {}, {}, {r3, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {r3}, {}, {}, {}, {r2}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r2, r4}, {0x0, r4}, {r3, r4}, {}, {}, {}, {}, {}, {r3, r4}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {}, {r2}, {}, {r3, r4}, {r2, r4}, {0x0, r4}, {}, {}, {r3, r4}, {r3}, {}, {}, {r2}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {0x0, r4}, {r3}, {}, {}, {}, {}, {}, {r2, r4}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r2}, {}, {r2}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {}, {r3}, {}, {}, {r3}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r3, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r3, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r2, r4}, {}, {r2, r4}, {}, {r3}, {r3}, {r2}, {}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0x5, "710ce82b173d12"})
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r5, 0x0, 0x8400fffffffa)

00:08:42 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, 0x0)
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:42 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000001fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:42 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(0xffffffffffffffff, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  522.363603][T31637] loop3: detected capacity change from 0 to 264192
00:08:42 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000004fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  522.462836][T31640] loop0: detected capacity change from 0 to 264192
[  522.559953][T31643] loop1: detected capacity change from 0 to 264192
[  522.629602][T31646] loop3: detected capacity change from 0 to 264192
00:08:42 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), 0x0, 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:42 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000005fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:42 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(0xffffffffffffffff, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:42 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x0, 0x0, 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:42 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000001fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:42 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000502000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:42 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(0xffffffffffffffff, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  522.883294][T31651] loop3: detected capacity change from 0 to 264192
00:08:43 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000001fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  523.000555][T31657] loop4: detected capacity change from 0 to 264192
[  523.107333][T31662] loop3: detected capacity change from 0 to 264192
00:08:43 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, 0x0)
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:43 executing program 0:
syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:43 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x0, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:43 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000503000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  523.498478][T31668] loop3: detected capacity change from 0 to 264192
[  523.509148][T31667] loop0: detected capacity change from 0 to 264192
[  523.659228][T31671] loop1: detected capacity change from 0 to 264192
00:08:43 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000504000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:43 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x0, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:43 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), 0x0, 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:43 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x0, 0x0, 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:43 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000505000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:43 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x0, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  523.886787][T31676] loop3: detected capacity change from 0 to 264192
00:08:44 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000506000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  524.005465][T31680] loop4: detected capacity change from 0 to 264192
00:08:44 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  524.102587][T31683] loop3: detected capacity change from 0 to 264192
[  524.284047][T31687] loop3: detected capacity change from 0 to 264192
00:08:44 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, 0x0)
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:44 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000507000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:44 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:44 executing program 0:
syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:44 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000508000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  524.579892][T31692] loop3: detected capacity change from 0 to 264192
[  524.600950][T31693] loop0: detected capacity change from 0 to 264192
00:08:44 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  524.743893][T31697] loop1: detected capacity change from 0 to 264192
00:08:44 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:44 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000509000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:44 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x0, &(0x7f0000000300), 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:44 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x8400fffffffa)

[  524.848054][T31699] loop3: detected capacity change from 0 to 264192
00:08:44 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff0100000001000000560000002500000019001000050a000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  524.914156][T31703] loop2: detected capacity change from 0 to 264192
[  524.933583][T31703] FAT-fs (loop2): bogus number of reserved sectors
[  524.940147][T31703] FAT-fs (loop2): Can't find a valid FAT filesystem
00:08:45 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff0100000001000000560000002500000019001000050b000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  525.002639][T31705] FAT-fs (loop4): bogus number of reserved sectors
[  525.009265][T31705] FAT-fs (loop4): Can't find a valid FAT filesystem
[  525.073468][T31709] loop3: detected capacity change from 0 to 264192
[  525.162774][T31711] validate_nla: 15 callbacks suppressed
[  525.162788][T31711] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
00:08:45 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(0x0)
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:45 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x8400fffffffa)

00:08:45 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff0100000001000000560000002500000019001000050c000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:45 executing program 0:
syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  525.663378][T31715] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  525.671306][T31716] loop3: detected capacity change from 0 to 264192
[  525.672059][T31717] loop0: detected capacity change from 0 to 264192
00:08:45 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x8400fffffffa)

00:08:45 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff0100000001000000560000002500000019001000050d000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:45 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x0, &(0x7f0000000300), 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:45 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff0100000001000000560000002500000019001000050e000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:45 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  525.826792][T31719] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  525.869456][T31721] loop1: detected capacity change from 0 to 264192
[  525.910568][T31724] loop2: detected capacity change from 0 to 264192
[  525.939207][T31724] FAT-fs (loop2): bogus number of reserved sectors
[  525.945812][T31724] FAT-fs (loop2): Can't find a valid FAT filesystem
[  525.955469][T31725] loop3: detected capacity change from 0 to 264192
00:08:46 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa)

00:08:46 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000510000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  526.007643][T31727] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  526.077187][T31729] FAT-fs (loop4): bogus number of reserved sectors
[  526.083780][T31729] FAT-fs (loop4): Can't find a valid FAT filesystem
00:08:46 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000511000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  526.158830][T31731] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  526.193824][T31733] loop3: detected capacity change from 0 to 264192
[  526.297701][T31735] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
00:08:46 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa)

00:08:46 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000512000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:46 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(0x0)
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:46 executing program 0:
syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa)

00:08:46 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x0, &(0x7f0000000300), 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  526.750232][T31739] loop3: detected capacity change from 0 to 264192
[  526.761557][T31740] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  526.761654][T31741] loop0: detected capacity change from 0 to 264192
00:08:46 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000525000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:46 executing program 0:
syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa)

00:08:46 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa)

00:08:46 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  526.898132][T31744] loop1: detected capacity change from 0 to 264192
[  526.936117][T31746] loop2: detected capacity change from 0 to 264192
00:08:47 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000548000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  526.943169][T31747] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  526.955277][T31746] FAT-fs (loop2): bogus number of reserved sectors
[  526.961859][T31746] FAT-fs (loop2): Can't find a valid FAT filesystem
00:08:47 executing program 0:
syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa)

00:08:47 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x0)

[  527.001293][T31750] loop0: detected capacity change from 0 to 264192
[  527.031578][T31751] loop3: detected capacity change from 0 to 264192
00:08:47 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff0100000001000000560000002500000019001000054c000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  527.121075][T31754] FAT-fs (loop4): bogus number of reserved sectors
[  527.121252][T31755] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  527.127643][T31754] FAT-fs (loop4): Can't find a valid FAT filesystem
[  527.255646][T31758] loop0: detected capacity change from 0 to 264192
[  527.274936][T31760] loop3: detected capacity change from 0 to 264192
[  527.289760][T31761] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
00:08:47 executing program 0:
syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  527.475025][T31763] loop0: detected capacity change from 0 to 264192
00:08:47 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000560000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:47 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x0)

00:08:47 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{0x0}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:47 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(0x0)
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:47 executing program 0:
syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:47 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000568000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  527.776278][T31767] loop3: detected capacity change from 0 to 264192
[  527.850458][T31769] loop0: detected capacity change from 0 to 264192
00:08:48 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x0)

00:08:48 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff0100000001000000560000002500000019001000056c000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:48 executing program 0:
syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:48 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x0, 0x0, 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  527.914662][T31772] loop1: detected capacity change from 0 to 264192
[  527.980085][T31776] loop2: detected capacity change from 0 to 264192
[  527.998652][T31776] FAT-fs (loop2): bogus number of reserved sectors
[  528.005462][T31776] FAT-fs (loop2): Can't find a valid FAT filesystem
[  528.019690][T31777] loop3: detected capacity change from 0 to 264192
00:08:48 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000574000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:48 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x0, &(0x7f0000000300), 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  528.135190][T31783] loop0: detected capacity change from 0 to 264192
00:08:48 executing program 0:
syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:48 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000577000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  528.322982][T31787] loop3: detected capacity change from 0 to 264192
[  528.343754][T31787] FAT-fs (loop3): bogus number of reserved sectors
[  528.350318][T31787] FAT-fs (loop3): Can't find a valid FAT filesystem
[  528.415725][T31791] loop0: detected capacity change from 0 to 264192
00:08:48 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff0100000001000000560000002500000019001000057a000007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:48 executing program 0:
syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:48 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{0x0}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:48 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:48 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500030007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  528.865204][T31794] loop0: detected capacity change from 0 to 264192
00:08:48 executing program 0:
syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:49 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  528.938486][T31797] loop1: detected capacity change from 0 to 264192
00:08:49 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x0, 0x0, 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  528.991717][T31800] loop2: detected capacity change from 0 to 264192
00:08:49 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500050007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  529.037758][T31800] FAT-fs (loop2): bogus number of reserved sectors
[  529.044342][T31800] FAT-fs (loop2): Can't find a valid FAT filesystem
[  529.168016][T31807] loop0: detected capacity change from 0 to 264192
[  529.178589][T31809] loop1: detected capacity change from 0 to 264192
00:08:49 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{0x0}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:49 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500060007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:49 executing program 0:
syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:49 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:49 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500070007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  529.382927][T31814] loop3: detected capacity change from 0 to 264192
[  529.400907][T31816] loop0: detected capacity change from 0 to 264192
[  529.417430][T31814] FAT-fs (loop3): bogus number of reserved sectors
[  529.424014][T31814] FAT-fs (loop3): Can't find a valid FAT filesystem
[  529.447539][T31819] loop1: detected capacity change from 0 to 264192
00:08:49 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{0x0}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:49 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500090007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:49 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:49 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff010000000100000056000000250000001900100005000a0007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:49 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  529.881040][T31823] loop1: detected capacity change from 0 to 264192
00:08:50 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x0, 0x0, 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:50 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff010000000100000056000000250000001900100005000b0007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  529.971736][T31826] loop2: detected capacity change from 0 to 264192
[  529.988564][T31826] FAT-fs (loop2): bogus number of reserved sectors
[  529.995087][T31826] FAT-fs (loop2): Can't find a valid FAT filesystem
[  530.110937][T31830] loop1: detected capacity change from 0 to 264192
00:08:50 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{0x0}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:50 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff010000000100000056000000250000001900100005000c0007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:50 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:50 executing program 0:
syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:50 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff010000000100000056000000250000001900100005000d0007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  530.285154][T31835] validate_nla: 13 callbacks suppressed
[  530.285169][T31835] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  530.364865][T31837] loop1: detected capacity change from 0 to 264192
[  530.434938][T31839] loop3: detected capacity change from 0 to 264192
[  530.456395][T31839] FAT-fs (loop3): bogus number of reserved sectors
[  530.462967][T31839] FAT-fs (loop3): Can't find a valid FAT filesystem
[  530.469989][T31841] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  530.552154][T31843] loop0: detected capacity change from 0 to 264192
00:08:50 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:50 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff010000000100000056000000250000001900100005000e0007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:50 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:50 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500110007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:50 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  530.856588][T31846] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  530.862382][T31847] loop1: detected capacity change from 0 to 264192
00:08:51 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500120007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:51 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x0, &(0x7f0000000300), 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  530.980566][T31850] loop2: detected capacity change from 0 to 264192
[  530.987572][T31851] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  530.997083][T31850] FAT-fs (loop2): bogus number of reserved sectors
[  531.003664][T31850] FAT-fs (loop2): Can't find a valid FAT filesystem
[  531.100699][T31854] loop1: detected capacity change from 0 to 264192
[  531.123479][T31855] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  531.159924][T31857] loop4: detected capacity change from 0 to 264192
[  531.192772][T31857] FAT-fs (loop4): bogus number of reserved sectors
[  531.199343][T31857] FAT-fs (loop4): Can't find a valid FAT filesystem
00:08:51 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff010000000100000056000000250000001900100005d4150007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:51 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000055300)={0x0, ""/256, 0x0, <r1=>0x0})
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={<r3=>0x0, ""/256, <r4=>0x0, <r5=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {}, {r4}, {r4}, {0x0, r5}, {}, {}, {}, {}, {r4, r5}, {0x0, r5}, {}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3, r5}, {}, {}, {0x0, r5}, {r4, r5}, {}, {r3, r5}, {}, {}, {r4}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {r3, r5}, {}, {}, {}, {r4}, {r3}, {}, {r4}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {}, {0x0, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {r4}, {}, {}, {}, {r3}, {0x0, r5}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {}, {r3}, {0x0, r5}, {}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {}, {0x0, r5}, {}, {r3, r5}, {}, {}, {r3, r5}, {0x0, r5}, {r4, r5}, {}, {}, {}, {}, {}, {r4, r5}, {}, {r3}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {}, {}, {r3}, {}, {r4, r5}, {r3, r5}, {0x0, r5}, {}, {}, {r4, r5}, {r4}, {}, {}, {r3}, {}, {}, {}, {0x0, r5}, {}, {0x0, r5}, {0x0, r5}, {}, {0x0, r5}, {}, {0x0, r5}, {r4}, {}, {}, {}, {}, {}, {r3, r5}, {r4}, {}, {}, {}, {r4}, {0x0, r5}, {}, {}, {r3}, {r3}, {0x0, r5}, {r3}, {r4}, {}, {}, {}, {r3}, {0x0, r5}, {r4}, {0x0, r5}, {r3, r5}, {}, {0x0, r5}, {}, {}, {0x0, r5}, {}, {r3}, {}, {r3}, {r3}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {r3}, {}, {r3}, {r4}, {}, {r3, r5}, {}, {}, {}, {r4}, {0x0, r5}, {r3}, {}, {r4}, {}, {}, {r4}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {r4, r5}, {}, {0x0, r5}, {}, {r4, r5}, {r4, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {r3, r5}, {}, {r3, r5}, {}, {r4}, {r4}, {r3}, {}, {}, {}, {}, {}, {}, {r4}, {0x0, r5}], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r1}, {}, {0x0, r5}], 0x5, "710ce82b173d12"})
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r6, 0x0, 0x8400fffffffa)

00:08:51 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  531.346233][T31860] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  531.371686][T31861] loop1: detected capacity change from 0 to 264192
00:08:51 executing program 0:
syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:51 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500200007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:51 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(0xffffffffffffffff, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:51 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500250007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  531.475879][T31864] loop3: detected capacity change from 0 to 264192
[  531.504560][T31865] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  531.640431][T31868] loop1: detected capacity change from 0 to 264192
[  531.673796][T31870] loop0: detected capacity change from 0 to 264192
[  531.681886][T31871] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
00:08:51 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(0xffffffffffffffff, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:51 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500480007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:51 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:51 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000055100)={<r1=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000055300)={0x0, ""/256, 0x0, <r2=>0x0})
r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {}, {r5}, {r5}, {0x0, r6}, {}, {}, {}, {}, {r5, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {0x0, r6}, {r5, r6}, {}, {r4, r6}, {}, {}, {r5}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {}, {r5}, {r4}, {}, {r5}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {r5}, {r4, r6}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r5}, {}, {}, {}, {r4}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {r4}, {0x0, r6}, {}, {r5}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {r4, r6}, {}, {}, {r4, r6}, {0x0, r6}, {r5, r6}, {}, {}, {}, {}, {}, {r5, r6}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5, r6}, {}, {}, {r4}, {}, {r5, r6}, {r4, r6}, {0x0, r6}, {}, {}, {r5, r6}, {r5}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {r4}, {r4}, {0x0, r6}, {r4}, {r5}, {}, {}, {}, {r4}, {0x0, r6}, {r5}, {0x0, r6}, {r4, r6}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {r4}, {}, {r4}, {r4}, {0x0, r6}, {r5, r6}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {r4}, {}, {r4}, {r5}, {}, {r4, r6}, {}, {}, {}, {r5}, {0x0, r6}, {r4}, {}, {r5}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {r5, r6}, {r5, r6}, {r5}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4, r6}, {}, {r4, r6}, {}, {r5}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {r5}, {0x0, r6}], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1, r2}, {}, {0x0, r6}], 0x5, "710ce82b173d12"})
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r7, 0x0, 0x8400fffffffa)

[  531.867528][T31874] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  531.868245][T31875] loop1: detected capacity change from 0 to 264192
00:08:52 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x0, &(0x7f0000000300), 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:52 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff010000000100000056000000250000001900100005004c0007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:52 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(0xffffffffffffffff, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  532.001370][T31879] loop3: detected capacity change from 0 to 264192
[  532.008532][T31878] loop2: detected capacity change from 0 to 264192
00:08:52 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500600007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  532.054505][T31878] FAT-fs (loop2): bogus number of reserved sectors
[  532.061076][T31878] FAT-fs (loop2): Can't find a valid FAT filesystem
[  532.069160][T31882] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  532.113429][T31884] loop1: detected capacity change from 0 to 264192
[  532.189819][T31887] loop4: detected capacity change from 0 to 264192
[  532.205878][T31887] FAT-fs (loop4): bogus number of reserved sectors
[  532.212471][T31887] FAT-fs (loop4): Can't find a valid FAT filesystem
00:08:52 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x0)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:52 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500680007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:52 executing program 0:
syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:52 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r1=>0x0}], 0x0, "2156816c73038c"})
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={<r3=>0x0, ""/256, <r4=>0x0, <r5=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {}, {r4}, {r4}, {0x0, r5}, {}, {}, {}, {}, {r4, r5}, {0x0, r5}, {}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3, r5}, {}, {}, {0x0, r5}, {r4, r5}, {}, {r3, r5}, {}, {}, {r4}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {r3, r5}, {}, {}, {}, {r4}, {r3}, {}, {r4}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {}, {0x0, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {r4}, {}, {}, {}, {r3}, {0x0, r5}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {}, {r3}, {0x0, r5}, {}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {}, {0x0, r5}, {}, {r3, r5}, {}, {}, {r3, r5}, {0x0, r5}, {r4, r5}, {}, {}, {}, {}, {}, {r4, r5}, {}, {r3}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {}, {}, {r3}, {}, {r4, r5}, {r3, r5}, {0x0, r5}, {}, {}, {r4, r5}, {r4}, {}, {}, {r3}, {}, {}, {}, {0x0, r5}, {}, {0x0, r5}, {0x0, r5}, {}, {0x0, r5}, {}, {0x0, r5}, {r4}, {}, {}, {}, {}, {}, {r3, r5}, {r4}, {}, {}, {}, {r4}, {0x0, r5}, {}, {}, {r3}, {r3}, {0x0, r5}, {r3}, {r4}, {}, {}, {}, {r3}, {0x0, r5}, {r4}, {0x0, r5}, {r3, r5}, {}, {0x0, r5}, {}, {}, {0x0, r5}, {}, {r3}, {}, {r3}, {r3}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {r3}, {}, {r3}, {r4}, {}, {r3, r5}, {}, {}, {}, {r4}, {0x0, r5}, {r3}, {}, {r4}, {}, {}, {r4}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {r4, r5}, {}, {0x0, r5}, {}, {r4, r5}, {r4, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {r3, r5}, {}, {r3, r5}, {}, {r4}, {r4}, {r3}, {}, {}, {}, {}, {}, {}, {r4}, {0x0, r5}], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}], 0x5, "710ce82b173d12"})
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r6, 0x0, 0x8400fffffffa)

00:08:52 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff010000000100000056000000250000001900100005006c0007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  532.597039][T31893] loop1: detected capacity change from 0 to 264192
[  532.601072][T31892] loop3: detected capacity change from 0 to 264192
00:08:52 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x0)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  532.782055][T31898] loop0: detected capacity change from 0 to 264192
00:08:52 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500740007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:52 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400", 0x15}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r1=>0x0}], 0x0, "2156816c73038c"})
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={<r3=>0x0, ""/256, <r4=>0x0, <r5=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {}, {r4}, {r4}, {0x0, r5}, {}, {}, {}, {}, {r4, r5}, {0x0, r5}, {}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3, r5}, {}, {}, {0x0, r5}, {r4, r5}, {}, {r3, r5}, {}, {}, {r4}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {r3, r5}, {}, {}, {}, {r4}, {r3}, {}, {r4}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {}, {0x0, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {r4}, {}, {}, {}, {r3}, {0x0, r5}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {}, {r3}, {0x0, r5}, {}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {}, {0x0, r5}, {}, {r3, r5}, {}, {}, {r3, r5}, {0x0, r5}, {r4, r5}, {}, {}, {}, {}, {}, {r4, r5}, {}, {r3}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {}, {}, {r3}, {}, {r4, r5}, {r3, r5}, {0x0, r5}, {}, {}, {r4, r5}, {r4}, {}, {}, {r3}, {}, {}, {}, {0x0, r5}, {}, {0x0, r5}, {0x0, r5}, {}, {0x0, r5}, {}, {0x0, r5}, {r4}, {}, {}, {}, {}, {}, {r3, r5}, {r4}, {}, {}, {}, {r4}, {0x0, r5}, {}, {}, {r3}, {r3}, {0x0, r5}, {r3}, {r4}, {}, {}, {}, {r3}, {0x0, r5}, {r4}, {0x0, r5}, {r3, r5}, {}, {0x0, r5}, {}, {}, {0x0, r5}, {}, {r3}, {}, {r3}, {r3}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {r3}, {}, {r3}, {r4}, {}, {r3, r5}, {}, {}, {}, {r4}, {0x0, r5}, {r3}, {}, {r4}, {}, {}, {r4}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {r4, r5}, {}, {0x0, r5}, {}, {r4, r5}, {r4, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {r3, r5}, {}, {r3, r5}, {}, {r4}, {r4}, {r3}, {}, {}, {}, {}, {}, {}, {r4}, {0x0, r5}], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}], 0x5, "710ce82b173d12"})
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r6, 0x0, 0x8400fffffffa)

[  532.872954][T31901] loop1: detected capacity change from 0 to 264192
00:08:53 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x0, &(0x7f0000000300), 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:53 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:53 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x0)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:53 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500770007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  533.016447][T31904] loop3: detected capacity change from 0 to 264192
[  533.037515][T31904] FAT-fs (loop3): invalid media value (0x00)
[  533.043608][T31904] FAT-fs (loop3): Can't find a valid FAT filesystem
00:08:53 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff010000000100000056000000250000001900100005007a0007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:53 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(0xffffffffffffffff, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  533.094285][T31908] loop2: detected capacity change from 0 to 264192
[  533.108440][T31910] loop1: detected capacity change from 0 to 264192
[  533.119182][T31908] FAT-fs (loop2): bogus number of reserved sectors
[  533.125812][T31908] FAT-fs (loop2): Can't find a valid FAT filesystem
[  533.236201][T31913] loop4: detected capacity change from 0 to 264192
[  533.259093][T31913] FAT-fs (loop4): bogus number of reserved sectors
[  533.265649][T31913] FAT-fs (loop4): Can't find a valid FAT filesystem
[  533.364460][T31916] loop1: detected capacity change from 0 to 264192
00:08:53 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000515d40007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:53 executing program 0:
syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:53 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(0xffffffffffffffff, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:53 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500020007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  533.713192][T31920] loop1: detected capacity change from 0 to 264192
00:08:53 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(0xffffffffffffffff, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:53 executing program 3:
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  533.884253][T31924] loop0: detected capacity change from 0 to 264192
[  533.960305][T31926] loop1: detected capacity change from 0 to 264192
00:08:54 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500030007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:54 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400", 0xc}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:54 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{0x0}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:54 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x0, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:54 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500040007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  534.122730][T31932] loop2: detected capacity change from 0 to 264192
[  534.149268][T31932] FAT-fs (loop2): bogus number of reserved sectors
[  534.155806][T31932] FAT-fs (loop2): Can't find a valid FAT filesystem
[  534.171444][T31934] loop1: detected capacity change from 0 to 264192
00:08:54 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x0, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:54 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500050007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  534.260326][T31937] loop4: detected capacity change from 0 to 264192
[  534.277739][T31937] FAT-fs (loop4): bogus number of reserved sectors
[  534.284321][T31937] FAT-fs (loop4): Can't find a valid FAT filesystem
[  534.418834][T31942] loop1: detected capacity change from 0 to 264192
00:08:54 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500060007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:54 executing program 0:
syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:54 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x0, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:54 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500070007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  534.812450][T31945] loop1: detected capacity change from 0 to 264192
00:08:54 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:54 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:55 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400", 0xc}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  534.956599][T31949] loop0: detected capacity change from 0 to 264192
[  535.047814][T31952] loop3: detected capacity change from 0 to 264192
[  535.086674][T31954] loop1: detected capacity change from 0 to 264192
00:08:55 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{0x0}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:55 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500080007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:55 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500090007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  535.134018][T31956] loop2: detected capacity change from 0 to 264192
[  535.165089][T31956] FAT-fs (loop2): bogus number of reserved sectors
[  535.171669][T31956] FAT-fs (loop2): Can't find a valid FAT filesystem
00:08:55 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:55 executing program 3:
r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, 0x0)
chdir(&(0x7f0000000000)='./file1\x00')
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={<r2=>0x0, ""/256, <r3=>0x0, <r4=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, <r5=>0x0}, {}, {}, {}, {}, {}, {}, {r2, r4}, {}, {r3}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3, r4}, {}, {}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {r2}, {}, {}, {r2}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {r2}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {r2}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {r2, r4}, {0x0, r4}, {r2}, {r3}, {0x0, r4}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {r3}, {r2}, {}, {}, {r2}, {r2}, {}, {}, {r2}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3}, {0x0, r4}, {}, {}, {}, {}, {r2, r4}, {r2}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {}, {}, {}, {r3, r4}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {r3}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {}, {}, {0x0, r4}, {}, {}, {}, {r2}, {}, {r2, <r6=>0x0}, {}, {r3}, {r3}, {r2}, {}, {r3}, {r3}], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r7=>0x0}], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000055100)={<r8=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000055300)={0x0, ""/256, 0x0, <r9=>0x0})
r10 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={<r11=>0x0, ""/256, <r12=>0x0, <r13=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r10, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {}, {r12}, {r12}, {0x0, r13}, {}, {}, {}, {}, {r12, r13}, {0x0, r13}, {}, {0x0, r13}, {}, {}, {0x0, r13}, {0x0, r13}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11, r13}, {}, {}, {0x0, r13}, {r12, r13}, {}, {r11, r13}, {}, {}, {r12}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {r11, r13}, {}, {}, {}, {r12}, {r11}, {}, {r12}, {}, {0x0, r13}, {0x0, r13}, {}, {}, {}, {}, {0x0, r13}, {0x0, r13}, {r12}, {r11, r13}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {r12}, {}, {}, {}, {r11}, {0x0, r13}, {}, {0x0, r13}, {0x0, r13}, {}, {}, {0x0, r13}, {}, {r11}, {0x0, r13}, {}, {r12}, {0x0, r13}, {0x0, r13}, {}, {}, {0x0, r13}, {0x0, r13}, {0x0, r13}, {}, {0x0, r13}, {}, {r11, r13}, {}, {}, {r11, r13}, {0x0, r13}, {r12, r13}, {}, {}, {}, {}, {}, {r12, r13}, {}, {r11}, {0x0, r13}, {}, {}, {0x0, r13}, {0x0, r13}, {0x0, r13}, {r12, r13}, {}, {}, {r11}, {}, {r12, r13}, {r11, r13}, {0x0, r13}, {}, {}, {r12, r13}, {r12}, {}, {}, {r11}, {}, {}, {}, {0x0, r13}, {}, {0x0, r13}, {0x0, r13}, {}, {0x0, r13}, {}, {0x0, r13}, {r12}, {}, {}, {}, {}, {}, {r11, r13}, {r12}, {}, {}, {}, {r12}, {0x0, r13}, {}, {}, {r11}, {r11}, {0x0, r13}, {r11}, {r12}, {}, {}, {}, {r11}, {0x0, r13}, {r12}, {0x0, r13}, {r11, r13}, {}, {0x0, r13}, {}, {}, {0x0, r13}, {}, {r11}, {}, {r11}, {r11}, {0x0, r13}, {r12, r13}, {0x0, r13}, {}, {}, {}, {}, {}, {r12}, {}, {}, {}, {r11}, {}, {r11}, {r12}, {}, {r11, r13}, {}, {}, {}, {r12}, {0x0, r13}, {r11}, {}, {r12}, {}, {}, {r12}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {r12, r13}, {}, {0x0, r13}, {}, {r12, r13}, {r12, r13}, {r12}, {0x0, r13}, {0x0, r13}, {}, {}, {}, {r11, r13}, {}, {r11, r13}, {}, {r12}, {r12}, {r11}, {}, {}, {}, {}, {}, {}, {r12}, {0x0, r13}], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [{}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r8, r9}, {}, {0x0, r13}], 0x5, "710ce82b173d12"})
ftruncate(r1, 0x800)
lseek(r1, 0x200, 0x0)
r14 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r1, r14, 0x0, 0x8400fffffffa)

[  535.269877][T31960] loop4: detected capacity change from 0 to 264192
[  535.289254][T31960] FAT-fs (loop4): bogus number of reserved sectors
[  535.295846][T31960] FAT-fs (loop4): Can't find a valid FAT filesystem
00:08:55 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff010000000100000056000000250000001900100005000a0007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  535.343645][T31962] validate_nla: 14 callbacks suppressed
[  535.343665][T31962] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  535.444995][T31964] loop1: detected capacity change from 0 to 264192
[  535.486421][T31967] loop3: detected capacity change from 0 to 264192
[  535.501370][T31968] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
00:08:55 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:55 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff010000000100000056000000250000001900100005000b0007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:55 executing program 0:
syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x800)
lseek(0xffffffffffffffff, 0x200, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0x8400fffffffa)

00:08:55 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff010000000100000056000000250000001900100005000c0007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:55 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x8400fffffffa)

[  535.877722][T31971] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  535.880959][T31972] loop1: detected capacity change from 0 to 264192
00:08:56 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400", 0xc}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  536.060166][T31975] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  536.061259][T31976] loop0: detected capacity change from 0 to 264192
00:08:56 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff010000000100000056000000250000001900100005000d0007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:56 executing program 0:
syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x800)
lseek(0xffffffffffffffff, 0x200, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0x8400fffffffa)

00:08:56 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{0x0}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  536.156411][T31979] loop1: detected capacity change from 0 to 264192
[  536.187023][T31980] loop2: detected capacity change from 0 to 264192
00:08:56 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x8400fffffffa)

[  536.209725][T31980] FAT-fs (loop2): bogus number of reserved sectors
[  536.216260][T31980] FAT-fs (loop2): Can't find a valid FAT filesystem
[  536.250193][T31982] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  536.329768][T31985] loop0: detected capacity change from 0 to 264192
[  536.329844][T31986] loop4: detected capacity change from 0 to 264192
00:08:56 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff010000000100000056000000250000001900100005000e0007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:56 executing program 0:
syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x800)
lseek(0xffffffffffffffff, 0x200, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0x8400fffffffa)

00:08:56 executing program 3:
r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, 0x0)
chdir(&(0x7f0000000000)='./file1\x00')
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={<r2=>0x0, ""/256, <r3=>0x0, <r4=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, <r5=>0x0}, {}, {}, {}, {}, {}, {}, {r2, r4}, {}, {r3}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3, r4}, {}, {}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {r2}, {}, {}, {r2}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {r2}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {r2}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {r2, r4}, {0x0, r4}, {r2}, {r3}, {0x0, r4}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {r3}, {r2}, {}, {}, {r2}, {r2}, {}, {}, {r2}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3}, {0x0, r4}, {}, {}, {}, {}, {r2, r4}, {r2}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {}, {}, {}, {r3, r4}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {r3}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {}, {}, {0x0, r4}, {}, {}, {}, {r2}, {}, {r2, <r6=>0x0}, {}, {r3}, {r3}, {r2}, {}, {r3}, {r3}], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r7=>0x0}], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000055100)={<r8=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000055300)={0x0, ""/256, 0x0, <r9=>0x0})
r10 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={<r11=>0x0, ""/256, <r12=>0x0, <r13=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r10, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {}, {r12}, {r12}, {0x0, r13}, {}, {}, {}, {}, {r12, r13}, {0x0, r13}, {}, {0x0, r13}, {}, {}, {0x0, r13}, {0x0, r13}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11, r13}, {}, {}, {0x0, r13}, {r12, r13}, {}, {r11, r13}, {}, {}, {r12}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {r11, r13}, {}, {}, {}, {r12}, {r11}, {}, {r12}, {}, {0x0, r13}, {0x0, r13}, {}, {}, {}, {}, {0x0, r13}, {0x0, r13}, {r12}, {r11, r13}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {r12}, {}, {}, {}, {r11}, {0x0, r13}, {}, {0x0, r13}, {0x0, r13}, {}, {}, {0x0, r13}, {}, {r11}, {0x0, r13}, {}, {r12}, {0x0, r13}, {0x0, r13}, {}, {}, {0x0, r13}, {0x0, r13}, {0x0, r13}, {}, {0x0, r13}, {}, {r11, r13}, {}, {}, {r11, r13}, {0x0, r13}, {r12, r13}, {}, {}, {}, {}, {}, {r12, r13}, {}, {r11}, {0x0, r13}, {}, {}, {0x0, r13}, {0x0, r13}, {0x0, r13}, {r12, r13}, {}, {}, {r11}, {}, {r12, r13}, {r11, r13}, {0x0, r13}, {}, {}, {r12, r13}, {r12}, {}, {}, {r11}, {}, {}, {}, {0x0, r13}, {}, {0x0, r13}, {0x0, r13}, {}, {0x0, r13}, {}, {0x0, r13}, {r12}, {}, {}, {}, {}, {}, {r11, r13}, {r12}, {}, {}, {}, {r12}, {0x0, r13}, {}, {}, {r11}, {r11}, {0x0, r13}, {r11}, {r12}, {}, {}, {}, {r11}, {0x0, r13}, {r12}, {0x0, r13}, {r11, r13}, {}, {0x0, r13}, {}, {}, {0x0, r13}, {}, {r11}, {}, {r11}, {r11}, {0x0, r13}, {r12, r13}, {0x0, r13}, {}, {}, {}, {}, {}, {r12}, {}, {}, {}, {r11}, {}, {r11}, {r12}, {}, {r11, r13}, {}, {}, {}, {r12}, {0x0, r13}, {r11}, {}, {r12}, {}, {}, {r12}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {r12, r13}, {}, {0x0, r13}, {}, {r12, r13}, {r12, r13}, {r12}, {0x0, r13}, {0x0, r13}, {}, {}, {}, {r11, r13}, {}, {r11, r13}, {}, {r12}, {r12}, {r11}, {}, {}, {}, {}, {}, {}, {r12}, {0x0, r13}], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [{}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r8, r9}, {}, {0x0, r13}], 0x5, "710ce82b173d12"})
ftruncate(r1, 0x800)
lseek(r1, 0x200, 0x0)
r14 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r1, r14, 0x0, 0x8400fffffffa)

[  536.371698][T31986] FAT-fs (loop4): bogus number of reserved sectors
[  536.378283][T31986] FAT-fs (loop4): Can't find a valid FAT filesystem
00:08:56 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500100007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:56 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x8400fffffffa)

[  536.467551][T31989] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  536.490413][T31990] loop1: detected capacity change from 0 to 264192
00:08:56 executing program 0:
syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  536.569018][T31992] loop0: detected capacity change from 0 to 264192
00:08:56 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500110007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  536.625605][T31996] loop3: detected capacity change from 0 to 264192
[  536.627253][T31995] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  536.719727][T31998] loop1: detected capacity change from 0 to 264192
[  536.790979][T32000] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  536.825846][T32002] loop0: detected capacity change from 0 to 264192
00:08:57 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa)

00:08:57 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500120007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:57 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200", 0x12}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  537.084399][T32006] loop1: detected capacity change from 0 to 264192
[  537.085817][T32005] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
00:08:57 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:57 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500250007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:57 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa)

[  537.186110][T32008] loop2: detected capacity change from 0 to 264192
[  537.206386][T32008] FAT-fs (loop2): invalid media value (0x00)
[  537.212459][T32008] FAT-fs (loop2): Can't find a valid FAT filesystem
00:08:57 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500480007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  537.268965][T32010] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  537.344480][T32013] loop4: detected capacity change from 0 to 264192
[  537.352539][T32014] loop1: detected capacity change from 0 to 264192
[  537.391221][T32013] FAT-fs (loop4): bogus number of reserved sectors
[  537.397909][T32013] FAT-fs (loop4): Can't find a valid FAT filesystem
00:08:57 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa)

00:08:57 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff010000000100000056000000250000001900100005004c0007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:57 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400", 0xc}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  537.594230][T32019] loop1: detected capacity change from 0 to 264192
00:08:57 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500600007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:57 executing program 0:
syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:57 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x0)

[  537.703854][T32022] loop3: detected capacity change from 0 to 264192
[  537.718522][T32022] FAT-fs (loop3): bogus number of reserved sectors
[  537.725082][T32022] FAT-fs (loop3): Can't find a valid FAT filesystem
00:08:57 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500680007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  537.839676][T32026] loop1: detected capacity change from 0 to 264192
[  537.952412][T32030] loop0: detected capacity change from 0 to 264192
00:08:58 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200", 0x12}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:58 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x0)

00:08:58 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff010000000100000056000000250000001900100005006c0007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:58 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  538.143818][T32032] loop2: detected capacity change from 0 to 264192
[  538.158984][T32032] FAT-fs (loop2): invalid media value (0x00)
[  538.165052][T32032] FAT-fs (loop2): Can't find a valid FAT filesystem
00:08:58 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500740007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  538.230738][T32035] loop1: detected capacity change from 0 to 264192
00:08:58 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x0)

[  538.315365][T32038] loop4: detected capacity change from 0 to 264192
[  538.334512][T32038] FAT-fs (loop4): bogus number of reserved sectors
[  538.341154][T32038] FAT-fs (loop4): Can't find a valid FAT filesystem
[  538.477663][T32042] loop1: detected capacity change from 0 to 264192
00:08:58 executing program 3:
syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:58 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500770007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:58 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200", 0x12}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  538.694501][T32047] loop1: detected capacity change from 0 to 264192
[  538.717837][T32048] loop3: detected capacity change from 0 to 264192
[  538.726114][T32047] FAT-fs (loop1): invalid media value (0x00)
[  538.732186][T32047] FAT-fs (loop1): Can't find a valid FAT filesystem
00:08:58 executing program 0:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:58 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff010000000100000056000000250000001900100005007a0007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:58 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000307fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:59 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200", 0x12}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:59 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000507fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:59 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:59 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000607fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  539.163080][T32058] loop2: detected capacity change from 0 to 264192
[  539.186720][T32058] FAT-fs (loop2): invalid media value (0x00)
[  539.192857][T32058] FAT-fs (loop2): Can't find a valid FAT filesystem
00:08:59 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000707fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:59 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000907fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  539.321866][T32062] loop4: detected capacity change from 0 to 264192
[  539.350819][T32062] FAT-fs (loop4): bogus number of reserved sectors
[  539.357480][T32062] FAT-fs (loop4): Can't find a valid FAT filesystem
00:08:59 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000a07fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:59 executing program 1:
r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, 0x0)
chdir(&(0x7f0000000000)='./file1\x00')
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={<r2=>0x0, ""/256, <r3=>0x0, <r4=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, <r5=>0x0}, {}, {}, {}, {}, {}, {}, {r2, r4}, {}, {r3}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3, r4}, {}, {}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {r2}, {}, {}, {r2}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {r2}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {r2}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {r2, r4}, {0x0, r4}, {r2}, {r3}, {0x0, r4}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {r3}, {r2}, {}, {}, {r2}, {r2}, {}, {}, {r2}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3}, {0x0, r4}, {}, {}, {}, {}, {r2, r4}, {r2}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {}, {}, {}, {r3, r4}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {r3}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {}, {}, {0x0, r4}, {}, {}, {}, {r2}, {}, {r2, <r6=>0x0}, {}, {r3}, {r3}, {r2}, {}, {r3}, {r3}], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r7=>0x0}], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000055100)={<r8=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000055300)={0x0, ""/256, 0x0, <r9=>0x0})
r10 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={<r11=>0x0, ""/256, <r12=>0x0, <r13=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r10, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {}, {r12}, {r12}, {0x0, r13}, {}, {}, {}, {}, {r12, r13}, {0x0, r13}, {}, {0x0, r13}, {}, {}, {0x0, r13}, {0x0, r13}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11, r13}, {}, {}, {0x0, r13}, {r12, r13}, {}, {r11, r13}, {}, {}, {r12}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {r11, r13}, {}, {}, {}, {r12}, {r11}, {}, {r12}, {}, {0x0, r13}, {0x0, r13}, {}, {}, {}, {}, {0x0, r13}, {0x0, r13}, {r12}, {r11, r13}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {r12}, {}, {}, {}, {r11}, {0x0, r13}, {}, {0x0, r13}, {0x0, r13}, {}, {}, {0x0, r13}, {}, {r11}, {0x0, r13}, {}, {r12}, {0x0, r13}, {0x0, r13}, {}, {}, {0x0, r13}, {0x0, r13}, {0x0, r13}, {}, {0x0, r13}, {}, {r11, r13}, {}, {}, {r11, r13}, {0x0, r13}, {r12, r13}, {}, {}, {}, {}, {}, {r12, r13}, {}, {r11}, {0x0, r13}, {}, {}, {0x0, r13}, {0x0, r13}, {0x0, r13}, {r12, r13}, {}, {}, {r11}, {}, {r12, r13}, {r11, r13}, {0x0, r13}, {}, {}, {r12, r13}, {r12}, {}, {}, {r11}, {}, {}, {}, {0x0, r13}, {}, {0x0, r13}, {0x0, r13}, {}, {0x0, r13}, {}, {0x0, r13}, {r12}, {}, {}, {}, {}, {}, {r11, r13}, {r12}, {}, {}, {}, {r12}, {0x0, r13}, {}, {}, {r11}, {r11}, {0x0, r13}, {r11}, {r12}, {}, {}, {}, {r11}, {0x0, r13}, {r12}, {0x0, r13}, {r11, r13}, {}, {0x0, r13}, {}, {}, {0x0, r13}, {}, {r11}, {}, {r11}, {r11}, {0x0, r13}, {r12, r13}, {0x0, r13}, {}, {}, {}, {}, {}, {r12}, {}, {}, {}, {r11}, {}, {r11}, {r12}, {}, {r11, r13}, {}, {}, {}, {r12}, {0x0, r13}, {r11}, {}, {r12}, {}, {}, {r12}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {r12, r13}, {}, {0x0, r13}, {}, {r12, r13}, {r12, r13}, {r12}, {0x0, r13}, {0x0, r13}, {}, {}, {}, {r11, r13}, {}, {r11, r13}, {}, {r12}, {r12}, {r11}, {}, {}, {}, {}, {}, {}, {r12}, {0x0, r13}], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [{}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r8, r9}, {}, {0x0, r13}], 0x5, "710ce82b173d12"})
ftruncate(r1, 0x800)
lseek(r1, 0x200, 0x0)
r14 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r1, r14, 0x0, 0x8400fffffffa)

00:08:59 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200", 0x12}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r1=>0x0}], 0x0, "2156816c73038c"})
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={<r3=>0x0, ""/256, <r4=>0x0, <r5=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {}, {r4}, {r4}, {0x0, r5}, {}, {}, {}, {}, {r4, r5}, {0x0, r5}, {}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3, r5}, {}, {}, {0x0, r5}, {r4, r5}, {}, {r3, r5}, {}, {}, {r4}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {r3, r5}, {}, {}, {}, {r4}, {r3}, {}, {r4}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {}, {0x0, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {r4}, {}, {}, {}, {r3}, {0x0, r5}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {}, {r3}, {0x0, r5}, {}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {}, {0x0, r5}, {}, {r3, r5}, {}, {}, {r3, r5}, {0x0, r5}, {r4, r5}, {}, {}, {}, {}, {}, {r4, r5}, {}, {r3}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {}, {}, {r3}, {}, {r4, r5}, {r3, r5}, {0x0, r5}, {}, {}, {r4, r5}, {r4}, {}, {}, {r3}, {}, {}, {}, {0x0, r5}, {}, {0x0, r5}, {0x0, r5}, {}, {0x0, r5}, {}, {0x0, r5}, {r4}, {}, {}, {}, {}, {}, {r3, r5}, {r4}, {}, {}, {}, {r4}, {0x0, r5}, {}, {}, {r3}, {r3}, {0x0, r5}, {r3}, {r4}, {}, {}, {}, {r3}, {0x0, r5}, {r4}, {0x0, r5}, {r3, r5}, {}, {0x0, r5}, {}, {}, {0x0, r5}, {}, {r3}, {}, {r3}, {r3}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {r3}, {}, {r3}, {r4}, {}, {r3, r5}, {}, {}, {}, {r4}, {0x0, r5}, {r3}, {}, {r4}, {}, {}, {r4}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {r4, r5}, {}, {0x0, r5}, {}, {r4, r5}, {r4, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {r3, r5}, {}, {r3, r5}, {}, {r4}, {r4}, {r3}, {}, {}, {}, {}, {}, {}, {r4}, {0x0, r5}], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}], 0x5, "710ce82b173d12"})
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r6, 0x0, 0x8400fffffffa)

[  539.742233][T32070] loop1: detected capacity change from 0 to 264192
00:08:59 executing program 0:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:08:59 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000b07fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:08:59 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000c07fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  539.868207][T32072] loop3: detected capacity change from 0 to 264192
[  539.894028][T32072] FAT-fs (loop3): invalid media value (0x00)
[  539.900114][T32072] FAT-fs (loop3): Can't find a valid FAT filesystem
00:09:00 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400", 0x15}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:00 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000d07fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:09:00 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400", 0xc}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:00 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000e07fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  540.165290][T32081] loop2: detected capacity change from 0 to 264192
[  540.194768][T32081] FAT-fs (loop2): invalid media value (0x00)
[  540.200846][T32081] FAT-fs (loop2): Can't find a valid FAT filesystem
00:09:00 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500001107fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  540.333994][T32086] loop4: detected capacity change from 0 to 264192
[  540.350405][T32086] FAT-fs (loop4): bogus number of reserved sectors
[  540.356939][T32086] FAT-fs (loop4): Can't find a valid FAT filesystem
00:09:00 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500001207fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  540.452977][T32088] validate_nla: 18 callbacks suppressed
[  540.453048][T32088] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
00:09:00 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500d41507fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  540.573471][T32090] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
00:09:00 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400", 0xc}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r1=>0x0}], 0x0, "2156816c73038c"})
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={<r3=>0x0, ""/256, <r4=>0x0, <r5=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {}, {r4}, {r4}, {0x0, r5}, {}, {}, {}, {}, {r4, r5}, {0x0, r5}, {}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3, r5}, {}, {}, {0x0, r5}, {r4, r5}, {}, {r3, r5}, {}, {}, {r4}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {r3, r5}, {}, {}, {}, {r4}, {r3}, {}, {r4}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {}, {0x0, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {r4}, {}, {}, {}, {r3}, {0x0, r5}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {}, {r3}, {0x0, r5}, {}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {}, {0x0, r5}, {}, {r3, r5}, {}, {}, {r3, r5}, {0x0, r5}, {r4, r5}, {}, {}, {}, {}, {}, {r4, r5}, {}, {r3}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {}, {}, {r3}, {}, {r4, r5}, {r3, r5}, {0x0, r5}, {}, {}, {r4, r5}, {r4}, {}, {}, {r3}, {}, {}, {}, {0x0, r5}, {}, {0x0, r5}, {0x0, r5}, {}, {0x0, r5}, {}, {0x0, r5}, {r4}, {}, {}, {}, {}, {}, {r3, r5}, {r4}, {}, {}, {}, {r4}, {0x0, r5}, {}, {}, {r3}, {r3}, {0x0, r5}, {r3}, {r4}, {}, {}, {}, {r3}, {0x0, r5}, {r4}, {0x0, r5}, {r3, r5}, {}, {0x0, r5}, {}, {}, {0x0, r5}, {}, {r3}, {}, {r3}, {r3}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {r3}, {}, {r3}, {r4}, {}, {r3, r5}, {}, {}, {}, {r4}, {0x0, r5}, {r3}, {}, {r4}, {}, {}, {r4}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {r4, r5}, {}, {0x0, r5}, {}, {r4, r5}, {r4, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {r3, r5}, {}, {r3, r5}, {}, {r4}, {r4}, {r3}, {}, {}, {}, {}, {}, {}, {r4}, {0x0, r5}], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}], 0x5, "710ce82b173d12"})
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r6, 0x0, 0x8400fffffffa)

00:09:00 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200", 0x12}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r1=>0x0}], 0x0, "2156816c73038c"})
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={<r3=>0x0, ""/256, <r4=>0x0, <r5=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {}, {r4}, {r4}, {0x0, r5}, {}, {}, {}, {}, {r4, r5}, {0x0, r5}, {}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3, r5}, {}, {}, {0x0, r5}, {r4, r5}, {}, {r3, r5}, {}, {}, {r4}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {r3, r5}, {}, {}, {}, {r4}, {r3}, {}, {r4}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {}, {0x0, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {r4}, {}, {}, {}, {r3}, {0x0, r5}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {}, {r3}, {0x0, r5}, {}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {}, {0x0, r5}, {}, {r3, r5}, {}, {}, {r3, r5}, {0x0, r5}, {r4, r5}, {}, {}, {}, {}, {}, {r4, r5}, {}, {r3}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {}, {}, {r3}, {}, {r4, r5}, {r3, r5}, {0x0, r5}, {}, {}, {r4, r5}, {r4}, {}, {}, {r3}, {}, {}, {}, {0x0, r5}, {}, {0x0, r5}, {0x0, r5}, {}, {0x0, r5}, {}, {0x0, r5}, {r4}, {}, {}, {}, {}, {}, {r3, r5}, {r4}, {}, {}, {}, {r4}, {0x0, r5}, {}, {}, {r3}, {r3}, {0x0, r5}, {r3}, {r4}, {}, {}, {}, {r3}, {0x0, r5}, {r4}, {0x0, r5}, {r3, r5}, {}, {0x0, r5}, {}, {}, {0x0, r5}, {}, {r3}, {}, {r3}, {r3}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {r3}, {}, {r3}, {r4}, {}, {r3, r5}, {}, {}, {}, {r4}, {0x0, r5}, {r3}, {}, {r4}, {}, {}, {r4}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {r4, r5}, {}, {0x0, r5}, {}, {r4, r5}, {r4, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {r3, r5}, {}, {r3, r5}, {}, {r4}, {r4}, {r3}, {}, {}, {}, {}, {}, {}, {r4}, {0x0, r5}], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}], 0x5, "710ce82b173d12"})
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r6, 0x0, 0x8400fffffffa)

[  540.726927][T32092] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
00:09:00 executing program 0:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:00 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500002007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  540.847511][T32094] loop1: detected capacity change from 0 to 264192
[  540.874443][T32094] FAT-fs (loop1): bogus number of reserved sectors
[  540.881102][T32094] FAT-fs (loop1): Can't find a valid FAT filesystem
00:09:01 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500002507fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  540.906519][T32097] loop3: detected capacity change from 0 to 264192
[  540.927009][T32097] FAT-fs (loop3): invalid media value (0x00)
[  540.933069][T32097] FAT-fs (loop3): Can't find a valid FAT filesystem
[  540.936852][T32098] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
00:09:01 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400", 0x15}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:01 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500004807fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  541.089675][T32102] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
00:09:01 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400", 0xc}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  541.162514][T32104] loop2: detected capacity change from 0 to 264192
[  541.198927][T32104] FAT-fs (loop2): invalid media value (0x00)
[  541.205007][T32104] FAT-fs (loop2): Can't find a valid FAT filesystem
00:09:01 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500004c07fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  541.255954][T32106] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  541.367180][T32108] loop4: detected capacity change from 0 to 264192
[  541.389645][T32108] FAT-fs (loop4): bogus number of reserved sectors
[  541.396230][T32108] FAT-fs (loop4): Can't find a valid FAT filesystem
00:09:01 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500006007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  541.418621][T32110] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
00:09:01 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500006807fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  541.539400][T32112] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
00:09:01 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500006c07fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  541.657861][T32114] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
00:09:01 executing program 1:
r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f8", 0x16}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={<r2=>0x0, ""/256, <r3=>0x0, <r4=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, <r5=>0x0}, {}, {}, {}, {}, {}, {}, {r2, r4}, {}, {r3}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3, r4}, {}, {}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {r2}, {}, {}, {r2}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {r2}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {r2}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {r2, r4}, {0x0, r4}, {r2}, {r3}, {0x0, r4}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {r3}, {r2}, {}, {}, {r2}, {r2}, {}, {}, {r2}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3}, {0x0, r4}, {}, {}, {}, {}, {r2, r4}, {r2}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {}, {}, {}, {r3, r4}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {r3}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {}, {}, {0x0, r4}, {}, {}, {}, {r2}, {}, {r2, <r6=>0x0}, {}, {r3}, {r3}, {r2}, {}, {r3}, {r3}], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r7=>0x0}], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000055100)={<r8=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000055300)={0x0, ""/256, 0x0, <r9=>0x0})
r10 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={<r11=>0x0, ""/256, <r12=>0x0, <r13=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r10, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {}, {r12}, {r12}, {0x0, r13}, {}, {}, {}, {}, {r12, r13}, {0x0, r13}, {}, {0x0, r13}, {}, {}, {0x0, r13}, {0x0, r13}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11, r13}, {}, {}, {0x0, r13}, {r12, r13}, {}, {r11, r13}, {}, {}, {r12}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {r11, r13}, {}, {}, {}, {r12}, {r11}, {}, {r12}, {}, {0x0, r13}, {0x0, r13}, {}, {}, {}, {}, {0x0, r13}, {0x0, r13}, {r12}, {r11, r13}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {r12}, {}, {}, {}, {r11}, {0x0, r13}, {}, {0x0, r13}, {0x0, r13}, {}, {}, {0x0, r13}, {}, {r11}, {0x0, r13}, {}, {r12}, {0x0, r13}, {0x0, r13}, {}, {}, {0x0, r13}, {0x0, r13}, {0x0, r13}, {}, {0x0, r13}, {}, {r11, r13}, {}, {}, {r11, r13}, {0x0, r13}, {r12, r13}, {}, {}, {}, {}, {}, {r12, r13}, {}, {r11}, {0x0, r13}, {}, {}, {0x0, r13}, {0x0, r13}, {0x0, r13}, {r12, r13}, {}, {}, {r11}, {}, {r12, r13}, {r11, r13}, {0x0, r13}, {}, {}, {r12, r13}, {r12}, {}, {}, {r11}, {}, {}, {}, {0x0, r13}, {}, {0x0, r13}, {0x0, r13}, {}, {0x0, r13}, {}, {0x0, r13}, {r12}, {}, {}, {}, {}, {}, {r11, r13}, {r12}, {}, {}, {}, {r12}, {0x0, r13}, {}, {}, {r11}, {r11}, {0x0, r13}, {r11}, {r12}, {}, {}, {}, {r11}, {0x0, r13}, {r12}, {0x0, r13}, {r11, r13}, {}, {0x0, r13}, {}, {}, {0x0, r13}, {}, {r11}, {}, {r11}, {r11}, {0x0, r13}, {r12, r13}, {0x0, r13}, {}, {}, {}, {}, {}, {r12}, {}, {}, {}, {r11}, {}, {r11}, {r12}, {}, {r11, r13}, {}, {}, {}, {r12}, {0x0, r13}, {r11}, {}, {r12}, {}, {}, {r12}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {r12, r13}, {}, {0x0, r13}, {}, {r12, r13}, {r12, r13}, {r12}, {0x0, r13}, {0x0, r13}, {}, {}, {}, {r11, r13}, {}, {r11, r13}, {}, {r12}, {r12}, {r11}, {}, {}, {}, {}, {}, {}, {r12}, {0x0, r13}], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [{}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r8, r9}, {}, {0x0, r13}], 0x5, "710ce82b173d12"})
ftruncate(r1, 0x800)
lseek(r1, 0x200, 0x0)
r14 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r1, r14, 0x0, 0x8400fffffffa)

00:09:01 executing program 3:
syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r1=>0x0}], 0x0, "2156816c73038c"})
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={<r3=>0x0, ""/256, <r4=>0x0, <r5=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {}, {r4}, {r4}, {0x0, r5}, {}, {}, {}, {}, {r4, r5}, {0x0, r5}, {}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3, r5}, {}, {}, {0x0, r5}, {r4, r5}, {}, {r3, r5}, {}, {}, {r4}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {r3, r5}, {}, {}, {}, {r4}, {r3}, {}, {r4}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {}, {0x0, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {r4}, {}, {}, {}, {r3}, {0x0, r5}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {}, {r3}, {0x0, r5}, {}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {}, {0x0, r5}, {}, {r3, r5}, {}, {}, {r3, r5}, {0x0, r5}, {r4, r5}, {}, {}, {}, {}, {}, {r4, r5}, {}, {r3}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {}, {}, {r3}, {}, {r4, r5}, {r3, r5}, {0x0, r5}, {}, {}, {r4, r5}, {r4}, {}, {}, {r3}, {}, {}, {}, {0x0, r5}, {}, {0x0, r5}, {0x0, r5}, {}, {0x0, r5}, {}, {0x0, r5}, {r4}, {}, {}, {}, {}, {}, {r3, r5}, {r4}, {}, {}, {}, {r4}, {0x0, r5}, {}, {}, {r3}, {r3}, {0x0, r5}, {r3}, {r4}, {}, {}, {}, {r3}, {0x0, r5}, {r4}, {0x0, r5}, {r3, r5}, {}, {0x0, r5}, {}, {}, {0x0, r5}, {}, {r3}, {}, {r3}, {r3}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {r3}, {}, {r3}, {r4}, {}, {r3, r5}, {}, {}, {}, {r4}, {0x0, r5}, {r3}, {}, {r4}, {}, {}, {r4}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {r4, r5}, {}, {0x0, r5}, {}, {r4, r5}, {r4, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {r3, r5}, {}, {r3, r5}, {}, {r4}, {r4}, {r3}, {}, {}, {}, {}, {}, {}, {r4}, {0x0, r5}], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}], 0x5, "710ce82b173d12"})
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r6, 0x0, 0x8400fffffffa)

[  541.787768][T32116] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
00:09:01 executing program 0:
r0 = creat(0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:01 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500007407fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  541.874574][T32118] loop1: detected capacity change from 0 to 264192
[  541.902004][T32118] FAT-fs (loop1): bogus number of FAT sectors
[  541.908215][T32118] FAT-fs (loop1): Can't find a valid FAT filesystem
00:09:02 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500007707fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:09:02 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400", 0x15}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  542.000190][T32122] loop3: detected capacity change from 0 to 264192
00:09:02 executing program 0:
r0 = creat(0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:02 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500007a07fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:09:02 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400", 0xc}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:02 executing program 0:
r0 = creat(0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  542.168957][T32129] loop2: detected capacity change from 0 to 264192
[  542.193874][T32129] FAT-fs (loop2): invalid media value (0x00)
[  542.199932][T32129] FAT-fs (loop2): Can't find a valid FAT filesystem
00:09:02 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff0100000001000000560000002500000019001000050015d407fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:09:02 executing program 0:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  542.372903][T32137] loop4: detected capacity change from 0 to 264192
[  542.395634][T32137] FAT-fs (loop4): bogus number of reserved sectors
[  542.402208][T32137] FAT-fs (loop4): Can't find a valid FAT filesystem
00:09:02 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000005fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:09:02 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x0, &(0x7f0000000300), 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:02 executing program 3:
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r1=>0x0}], 0x0, "2156816c73038c"})
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={<r3=>0x0, ""/256, <r4=>0x0, <r5=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {}, {r4}, {r4}, {0x0, r5}, {}, {}, {}, {}, {r4, r5}, {0x0, r5}, {}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3, r5}, {}, {}, {0x0, r5}, {r4, r5}, {}, {r3, r5}, {}, {}, {r4}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {r3, r5}, {}, {}, {}, {r4}, {r3}, {}, {r4}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {}, {0x0, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {r4}, {}, {}, {}, {r3}, {0x0, r5}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {}, {r3}, {0x0, r5}, {}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {}, {0x0, r5}, {}, {r3, r5}, {}, {}, {r3, r5}, {0x0, r5}, {r4, r5}, {}, {}, {}, {}, {}, {r4, r5}, {}, {r3}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {}, {}, {r3}, {}, {r4, r5}, {r3, r5}, {0x0, r5}, {}, {}, {r4, r5}, {r4}, {}, {}, {r3}, {}, {}, {}, {0x0, r5}, {}, {0x0, r5}, {0x0, r5}, {}, {0x0, r5}, {}, {0x0, r5}, {r4}, {}, {}, {}, {}, {}, {r3, r5}, {r4}, {}, {}, {}, {r4}, {0x0, r5}, {}, {}, {r3}, {r3}, {0x0, r5}, {r3}, {r4}, {}, {}, {}, {r3}, {0x0, r5}, {r4}, {0x0, r5}, {r3, r5}, {}, {0x0, r5}, {}, {}, {0x0, r5}, {}, {r3}, {}, {r3}, {r3}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {r3}, {}, {r3}, {r4}, {}, {r3, r5}, {}, {}, {}, {r4}, {0x0, r5}, {r3}, {}, {r4}, {}, {}, {r4}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {r4, r5}, {}, {0x0, r5}, {}, {r4, r5}, {r4, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {r3, r5}, {}, {r3, r5}, {}, {r4}, {r4}, {r3}, {}, {}, {}, {}, {}, {}, {r4}, {0x0, r5}], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}], 0x5, "710ce82b173d12"})
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r6, 0x0, 0x8400fffffffa)

00:09:02 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000207fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:09:03 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000307fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  542.948873][T32145] loop1: detected capacity change from 0 to 264192
[  542.982499][T32145] FAT-fs (loop1): bogus number of reserved sectors
[  542.989123][T32145] FAT-fs (loop1): Can't find a valid FAT filesystem
00:09:03 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f8", 0x16}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:03 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000407fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:09:03 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200", 0x12}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  543.172718][T32152] loop2: detected capacity change from 0 to 264192
[  543.195964][T32152] FAT-fs (loop2): bogus number of FAT sectors
[  543.202115][T32152] FAT-fs (loop2): Can't find a valid FAT filesystem
00:09:03 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000507fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:09:03 executing program 0:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:03 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000607fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  543.366395][T32157] loop4: detected capacity change from 0 to 264192
[  543.393536][T32157] FAT-fs (loop4): invalid media value (0x00)
[  543.399597][T32157] FAT-fs (loop4): Can't find a valid FAT filesystem
00:09:03 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000707fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:09:03 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000807fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:09:04 executing program 3:
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r1=>0x0}], 0x0, "2156816c73038c"})
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={<r3=>0x0, ""/256, <r4=>0x0, <r5=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {}, {r4}, {r4}, {0x0, r5}, {}, {}, {}, {}, {r4, r5}, {0x0, r5}, {}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3, r5}, {}, {}, {0x0, r5}, {r4, r5}, {}, {r3, r5}, {}, {}, {r4}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {r3, r5}, {}, {}, {}, {r4}, {r3}, {}, {r4}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {}, {0x0, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {r4}, {}, {}, {}, {r3}, {0x0, r5}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {}, {r3}, {0x0, r5}, {}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {}, {0x0, r5}, {}, {r3, r5}, {}, {}, {r3, r5}, {0x0, r5}, {r4, r5}, {}, {}, {}, {}, {}, {r4, r5}, {}, {r3}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {}, {}, {r3}, {}, {r4, r5}, {r3, r5}, {0x0, r5}, {}, {}, {r4, r5}, {r4}, {}, {}, {r3}, {}, {}, {}, {0x0, r5}, {}, {0x0, r5}, {0x0, r5}, {}, {0x0, r5}, {}, {0x0, r5}, {r4}, {}, {}, {}, {}, {}, {r3, r5}, {r4}, {}, {}, {}, {r4}, {0x0, r5}, {}, {}, {r3}, {r3}, {0x0, r5}, {r3}, {r4}, {}, {}, {}, {r3}, {0x0, r5}, {r4}, {0x0, r5}, {r3, r5}, {}, {0x0, r5}, {}, {}, {0x0, r5}, {}, {r3}, {}, {r3}, {r3}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {r3}, {}, {r3}, {r4}, {}, {r3, r5}, {}, {}, {}, {r4}, {0x0, r5}, {r3}, {}, {r4}, {}, {}, {r4}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {r4, r5}, {}, {0x0, r5}, {}, {r4, r5}, {r4, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {r3, r5}, {}, {r3, r5}, {}, {r4}, {r4}, {r3}, {}, {}, {}, {}, {}, {}, {r4}, {0x0, r5}], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}], 0x5, "710ce82b173d12"})
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r6, 0x0, 0x8400fffffffa)

00:09:04 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000907fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:09:04 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x0, &(0x7f0000000300), 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:04 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f8", 0x16}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:04 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000a07fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  544.055062][T32170] loop1: detected capacity change from 0 to 264192
[  544.082721][T32170] FAT-fs (loop1): bogus number of reserved sectors
[  544.089310][T32170] FAT-fs (loop1): Can't find a valid FAT filesystem
00:09:04 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000b07fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:09:04 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200", 0x12}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  544.229233][T32176] loop2: detected capacity change from 0 to 264192
[  544.249921][T32176] FAT-fs (loop2): bogus number of FAT sectors
[  544.256161][T32176] FAT-fs (loop2): Can't find a valid FAT filesystem
00:09:04 executing program 0:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:04 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000c07fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  544.396370][T32180] loop4: detected capacity change from 0 to 264192
[  544.418698][T32180] FAT-fs (loop4): invalid media value (0x00)
[  544.424764][T32180] FAT-fs (loop4): Can't find a valid FAT filesystem
00:09:04 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000d07fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:09:04 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000e07fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:09:04 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500001007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:09:05 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500001107fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:09:05 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200", 0x12}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:05 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x0, 0x0, 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:05 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f8", 0x16}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:05 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500001207fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  545.118323][T32194] loop1: detected capacity change from 0 to 264192
[  545.151054][T32194] FAT-fs (loop1): invalid media value (0x00)
[  545.157081][T32194] FAT-fs (loop1): Can't find a valid FAT filesystem
00:09:05 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200", 0x12}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:05 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500002507fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  545.258419][T32200] loop2: detected capacity change from 0 to 264192
[  545.276733][T32200] FAT-fs (loop2): bogus number of FAT sectors
[  545.282877][T32200] FAT-fs (loop2): Can't find a valid FAT filesystem
00:09:05 executing program 0:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:05 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500004807fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  545.435533][T32205] loop4: detected capacity change from 0 to 264192
[  545.455453][T32205] FAT-fs (loop4): invalid media value (0x00)
[  545.461523][T32205] FAT-fs (loop4): Can't find a valid FAT filesystem
00:09:05 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500004c07fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  545.572263][T32209] validate_nla: 22 callbacks suppressed
[  545.572278][T32209] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
00:09:05 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500006007fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  545.700714][T32211] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
00:09:05 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500006807fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  545.837589][T32213] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
00:09:06 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500006c07fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:09:06 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200", 0x12}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  545.961985][T32215] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
00:09:06 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x0, 0x0, 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:06 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:06 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500007407fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  546.102200][T32217] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  546.151610][T32219] loop1: detected capacity change from 0 to 264192
[  546.177039][T32219] FAT-fs (loop1): invalid media value (0x00)
[  546.183112][T32219] FAT-fs (loop1): Can't find a valid FAT filesystem
00:09:06 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400", 0x15}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:06 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500007707fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  546.278496][T32223] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  546.327707][T32224] loop2: detected capacity change from 0 to 264192
00:09:06 executing program 0:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:06 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500007a07fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  546.429061][T32228] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  546.449488][T32229] loop4: detected capacity change from 0 to 264192
[  546.480420][T32229] FAT-fs (loop4): invalid media value (0x00)
[  546.486444][T32229] FAT-fs (loop4): Can't find a valid FAT filesystem
00:09:06 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000004fd17e5ffff080004000000282459801b", 0x39}], 0x1)

00:09:06 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  546.602134][T32233] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
00:09:06 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000005fd17e5ffff080004000000282459801b", 0x39}], 0x1)

[  546.750648][T32235] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  546.839326][T32237] loop2: detected capacity change from 0 to 264192
00:09:07 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff0c0004000000282459801b", 0x39}], 0x1)

[  546.931271][T32239] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
00:09:07 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0x8)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
recvfrom$inet6(r0, &(0x7f0000000000)=""/81, 0x51, 0x41, &(0x7f0000000080)={0xa, 0x4e24, 0x600000, @empty, 0xfffffff8}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0)

00:09:07 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff290004000000282459801b", 0x39}], 0x1)

00:09:07 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
creat(&(0x7f0000000080)='./bus\x00', 0xe8ecd7890640dc8a)
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r1=>0x0}], 0x0, "2156816c73038c"})
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={<r3=>0x0, ""/256, <r4=>0x0, <r5=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {}, {r4}, {r4}, {0x0, r5}, {}, {}, {}, {}, {r4, r5}, {0x0, r5}, {}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3, r5}, {}, {}, {0x0, r5}, {r4, r5}, {}, {r3, r5}, {}, {}, {r4}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {r3, r5}, {}, {}, {}, {r4}, {r3}, {}, {r4}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {}, {0x0, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {r4}, {}, {}, {}, {r3}, {0x0, r5}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {}, {r3}, {0x0, r5}, {}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {}, {0x0, r5}, {}, {r3, r5}, {}, {}, {r3, r5}, {0x0, r5}, {r4, r5}, {}, {}, {}, {}, {}, {r4, r5}, {}, {r3}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {}, {}, {r3}, {}, {r4, r5}, {r3, r5}, {0x0, r5}, {}, {}, {r4, r5}, {r4}, {}, {}, {r3}, {}, {}, {}, {0x0, r5}, {}, {0x0, r5}, {0x0, r5}, {}, {0x0, r5}, {}, {0x0, r5}, {r4}, {}, {}, {}, {}, {}, {r3, r5}, {r4}, {}, {}, {}, {r4}, {0x0, r5}, {}, {}, {r3}, {r3}, {0x0, r5}, {r3}, {r4}, {}, {}, {}, {r3}, {0x0, r5}, {r4}, {0x0, r5}, {r3, r5}, {}, {0x0, r5}, {}, {}, {0x0, r5}, {}, {r3}, {}, {r3}, {r3}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {r3}, {}, {r3}, {r4}, {}, {r3, r5}, {}, {}, {}, {r4}, {0x0, r5}, {r3}, {}, {r4}, {}, {}, {r4}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {r4, r5}, {}, {0x0, r5}, {}, {r4, r5}, {r4, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {r3, r5}, {}, {r3, r5}, {}, {r4}, {r4}, {r3}, {}, {}, {}, {}, {}, {}, {r4}, {0x0, r5}], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}], 0x5, "710ce82b173d12"})
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r6, 0x0, 0x8400fffffffa)

00:09:07 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:07 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff084300000000282459801b", 0x39}], 0x1)

00:09:07 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0x8)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
recvfrom$inet6(r0, &(0x7f0000000000)=""/81, 0x51, 0x41, &(0x7f0000000080)={0xa, 0x4e24, 0x600000, @empty, 0xfffffff8}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0)

[  547.313890][T32247] loop2: detected capacity change from 0 to 264192
00:09:07 executing program 0:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:07 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400", 0x15}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:07 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff085c00000000282459801b", 0x39}], 0x1)

00:09:07 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0x8)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
recvfrom$inet6(r0, &(0x7f0000000000)=""/81, 0x51, 0x41, &(0x7f0000000080)={0xa, 0x4e24, 0x600000, @empty, 0xfffffff8}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0)

[  547.376191][T32251] loop3: detected capacity change from 0 to 264192
[  547.482282][T32255] loop4: detected capacity change from 0 to 264192
[  547.522193][T32255] FAT-fs (loop4): invalid media value (0x00)
00:09:07 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff080003000000282459801b", 0x39}], 0x1)

[  547.528249][T32255] FAT-fs (loop4): Can't find a valid FAT filesystem
00:09:07 executing program 1:
r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={<r2=>0x0, ""/256, <r3=>0x0, <r4=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, <r5=>0x0}, {}, {}, {}, {}, {}, {}, {r2, r4}, {}, {r3}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3, r4}, {}, {}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {r2}, {}, {}, {r2}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {r2}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {r2}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {r2, r4}, {0x0, r4}, {r2}, {r3}, {0x0, r4}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {r3}, {r2}, {}, {}, {r2}, {r2}, {}, {}, {r2}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3}, {0x0, r4}, {}, {}, {}, {}, {r2, r4}, {r2}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {}, {}, {}, {r3, r4}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {r3}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {}, {}, {0x0, r4}, {}, {}, {}, {r2}, {}, {r2, <r6=>0x0}, {}, {r3}, {r3}, {r2}, {}, {r3}, {r3}], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r7=>0x0}], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000055100)={<r8=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000055300)={0x0, ""/256, 0x0, <r9=>0x0})
r10 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={<r11=>0x0, ""/256, <r12=>0x0, <r13=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r10, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {}, {r12}, {r12}, {0x0, r13}, {}, {}, {}, {}, {r12, r13}, {0x0, r13}, {}, {0x0, r13}, {}, {}, {0x0, r13}, {0x0, r13}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11, r13}, {}, {}, {0x0, r13}, {r12, r13}, {}, {r11, r13}, {}, {}, {r12}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {r11, r13}, {}, {}, {}, {r12}, {r11}, {}, {r12}, {}, {0x0, r13}, {0x0, r13}, {}, {}, {}, {}, {0x0, r13}, {0x0, r13}, {r12}, {r11, r13}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {r12}, {}, {}, {}, {r11}, {0x0, r13}, {}, {0x0, r13}, {0x0, r13}, {}, {}, {0x0, r13}, {}, {r11}, {0x0, r13}, {}, {r12}, {0x0, r13}, {0x0, r13}, {}, {}, {0x0, r13}, {0x0, r13}, {0x0, r13}, {}, {0x0, r13}, {}, {r11, r13}, {}, {}, {r11, r13}, {0x0, r13}, {r12, r13}, {}, {}, {}, {}, {}, {r12, r13}, {}, {r11}, {0x0, r13}, {}, {}, {0x0, r13}, {0x0, r13}, {0x0, r13}, {r12, r13}, {}, {}, {r11}, {}, {r12, r13}, {r11, r13}, {0x0, r13}, {}, {}, {r12, r13}, {r12}, {}, {}, {r11}, {}, {}, {}, {0x0, r13}, {}, {0x0, r13}, {0x0, r13}, {}, {0x0, r13}, {}, {0x0, r13}, {r12}, {}, {}, {}, {}, {}, {r11, r13}, {r12}, {}, {}, {}, {r12}, {0x0, r13}, {}, {}, {r11}, {r11}, {0x0, r13}, {r11}, {r12}, {}, {}, {}, {r11}, {0x0, r13}, {r12}, {0x0, r13}, {r11, r13}, {}, {0x0, r13}, {}, {}, {0x0, r13}, {}, {r11}, {}, {r11}, {r11}, {0x0, r13}, {r12, r13}, {0x0, r13}, {}, {}, {}, {}, {}, {r12}, {}, {}, {}, {r11}, {}, {r11}, {r12}, {}, {r11, r13}, {}, {}, {}, {r12}, {0x0, r13}, {r11}, {}, {r12}, {}, {}, {r12}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {r12, r13}, {}, {0x0, r13}, {}, {r12, r13}, {r12, r13}, {r12}, {0x0, r13}, {0x0, r13}, {}, {}, {}, {r11, r13}, {}, {r11, r13}, {}, {r12}, {r12}, {r11}, {}, {}, {}, {}, {}, {}, {r12}, {0x0, r13}], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [{}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r8, r9}, {}, {0x0, r13}], 0x5, "710ce82b173d12"})
ftruncate(r1, 0x800)
lseek(r1, 0x200, 0x0)
r14 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r1, r14, 0x0, 0x8400fffffffa)

00:09:07 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff080204000000282459801b", 0x39}], 0x1)

[  547.695315][T32265] loop1: detected capacity change from 0 to 264192
00:09:07 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, 0x0)
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:07 executing program 3:
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:07 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff080304000000282459801b", 0x39}], 0x1)

00:09:07 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff080404000000282459801b", 0x39}], 0x1)

[  547.946338][T32271] loop2: detected capacity change from 0 to 264192
00:09:08 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff080504000000282459801b", 0x39}], 0x1)

00:09:08 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff080604000000282459801b", 0x39}], 0x1)

00:09:08 executing program 0:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:08 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400", 0x15}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:08 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff080704000000282459801b", 0x39}], 0x1)

[  548.466671][T32281] loop4: detected capacity change from 0 to 264192
[  548.488624][T32281] FAT-fs (loop4): invalid media value (0x00)
[  548.494702][T32281] FAT-fs (loop4): Can't find a valid FAT filesystem
00:09:08 executing program 1:
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:08 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff080804000000282459801b", 0x39}], 0x1)

00:09:08 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff080904000000282459801b", 0x39}], 0x1)

00:09:08 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, 0x0)
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:08 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff080a04000000282459801b", 0x39}], 0x1)

00:09:08 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x8)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x4e22, 0x400, 0x4e22, 0x6, 0x2, 0x20, 0x20, 0x6, 0x0, 0xffffffffffffffff}, {0x74fb, 0xda8f, 0x5, 0x200, 0x585bb666, 0x3, 0x22, 0x8}, {0x3, 0x0, 0x1, 0x5a61}, 0x1000, 0x6eebb3, 0x1, 0x0, 0x1}, {{@in6=@private0, 0x4d5, 0x2b}, 0x2, @in=@empty, 0x3501, 0x3, 0x3, 0x5, 0xffff2b0b, 0x200, 0x6}}, 0xe8)
setsockopt$inet6_buf(r0, 0x29, 0xcc, &(0x7f0000000200)="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", 0xfd)

00:09:09 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff080b04000000282459801b", 0x39}], 0x1)

00:09:09 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x8)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x4e22, 0x400, 0x4e22, 0x6, 0x2, 0x20, 0x20, 0x6, 0x0, 0xffffffffffffffff}, {0x74fb, 0xda8f, 0x5, 0x200, 0x585bb666, 0x3, 0x22, 0x8}, {0x3, 0x0, 0x1, 0x5a61}, 0x1000, 0x6eebb3, 0x1, 0x0, 0x1}, {{@in6=@private0, 0x4d5, 0x2b}, 0x2, @in=@empty, 0x3501, 0x3, 0x3, 0x5, 0xffff2b0b, 0x200, 0x6}}, 0xe8)
setsockopt$inet6_buf(r0, 0x29, 0xcc, &(0x7f0000000200)="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", 0xfd)

[  549.070837][T32298] loop2: detected capacity change from 0 to 264192
00:09:09 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff080c04000000282459801b", 0x39}], 0x1)

00:09:09 executing program 0:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:09 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff080d04000000282459801b", 0x39}], 0x1)

00:09:09 executing program 3:
r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
creat(&(0x7f0000000080)='./bus\x00', 0xe8ecd7890640dc8a)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={<r2=>0x0, ""/256, <r3=>0x0, <r4=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, <r5=>0x0}, {}, {}, {}, {}, {}, {}, {r2, r4}, {}, {r3}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3, r4}, {}, {}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {r2}, {}, {}, {r2}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {r2}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {r2}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {r2, r4}, {0x0, r4}, {r2}, {r3}, {0x0, r4}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {r3}, {r2}, {}, {}, {r2}, {r2}, {}, {}, {r2}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3}, {0x0, r4}, {}, {}, {}, {}, {r2, r4}, {r2}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {}, {}, {}, {r3, r4}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {r3}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {}, {}, {0x0, r4}, {}, {}, {}, {r2}, {}, {r2, <r6=>0x0}, {}, {r3}, {r3}, {r2}, {}, {r3}, {r3}], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={<r7=>0x0, ""/256, <r8=>0x0, <r9=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7, r9}, {}, {r8}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {r7, r9}, {}, {}, {0x0, r9}, {r8, r9}, {}, {}, {}, {}, {r8}, {}, {0x0, r9}, {r8}, {0x0, r9}, {r8}, {0x0, r9}, {}, {}, {}, {r7}, {}, {}, {r7}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {r7}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {r7}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {r7, r9}, {0x0, r9}, {r7}, {r8}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {r8}, {r7}, {}, {}, {r7}, {r7}, {}, {}, {r7}, {}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8, r9}, {<r10=>0x0}, {}, {}, {}, {0x0, r9}, {r7, r9}, {r8}, {0x0, r9}, {}, {}, {}, {}, {r7, r9}, {r7}, {0x0, r9}, {}, {r7}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {r8}, {r7}, {}, {}, {}, {}, {r7, r9}, {r8, r9}, {}, {0x0, r9}, {}, {r8}, {0x0, r9}, {}, {}, {}, {}, {}, {r7}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r8}, {0x0, r9}, {r7}, {}, {}, {}, {}, {0x0, r9}, {r8}, {r7}, {}, {}, {}, {}, {}, {}, {r8, r9}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7, r9}, {}, {}, {}, {}, {}, {r7}, {}, {r8}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {0x0, r9}, {}, {r8}, {}, {0x0, r9}, {r7}, {}, {r8, r9}, {}, {}, {0x0, r9}, {}, {}, {}, {r7}, {}, {r7}, {}, {r8}, {r8}, {r7}, {}, {r8}, {r8}], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000054100)={<r11=>0x0, 0x0, "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", "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"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000055100)={<r12=>0x0})
r13 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r13, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [{}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {r7, r11}, {}, {r12}], 0x5, "710ce82b173d12"})
ftruncate(r1, 0x800)
lseek(r1, 0x200, 0x0)
r14 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r1, r14, 0x0, 0x8400fffffffa)

[  549.455728][T32307] loop3: detected capacity change from 0 to 264192
00:09:09 executing program 1:
r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r1 = creat(&(0x7f0000000080)='./bus\x00', 0xe8ecd7890640dc8a)
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r3=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r4=>0x0}], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r5=>0x0}], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000055100)={<r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000055300)={0x0, ""/256, 0x0, <r7=>0x0})
r8 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={<r9=>0x0, ""/256, <r10=>0x0, <r11=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r8, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {}, {r10}, {r10}, {0x0, r11}, {}, {}, {}, {}, {r10, r11}, {0x0, r11}, {}, {0x0, r11}, {}, {}, {0x0, r11}, {0x0, r11}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9, r11}, {}, {}, {0x0, r11}, {r10, r11}, {}, {r9, r11}, {}, {}, {r10}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {r9, r11}, {}, {}, {}, {r10}, {r9}, {}, {r10}, {}, {0x0, r11}, {0x0, r11}, {}, {}, {}, {}, {0x0, r11}, {0x0, r11}, {r10}, {r9, r11}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {r10}, {}, {}, {}, {r9}, {0x0, r11}, {}, {0x0, r11}, {0x0, r11}, {}, {}, {0x0, r11}, {}, {r9}, {0x0, r11}, {}, {r10}, {0x0, r11}, {0x0, r11}, {}, {}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {}, {0x0, r11}, {}, {r9, r11}, {}, {}, {r9, r11}, {0x0, r11}, {r10, r11}, {}, {}, {}, {}, {}, {r10, r11}, {}, {r9}, {0x0, r11}, {}, {}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {r10, r11}, {}, {}, {r9}, {}, {r10, r11}, {r9, r11}, {0x0, r11}, {}, {}, {r10, r11}, {r10}, {}, {}, {r9}, {}, {}, {}, {0x0, r11}, {}, {0x0, r11}, {0x0, r11}, {}, {0x0, r11}, {}, {0x0, r11}, {r10}, {}, {}, {}, {}, {}, {r9, r11}, {r10}, {}, {}, {}, {r10}, {0x0, r11}, {}, {}, {r9}, {r9}, {0x0, r11}, {r9}, {r10}, {}, {}, {}, {r9}, {0x0, r11}, {r10}, {0x0, r11}, {r9, r11}, {}, {0x0, r11}, {}, {}, {0x0, r11}, {}, {r9}, {}, {r9}, {r9}, {0x0, r11}, {r10, r11}, {0x0, r11}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {r9}, {}, {r9}, {r10}, {}, {r9, r11}, {}, {}, {}, {r10}, {0x0, r11}, {r9}, {}, {r10}, {}, {}, {r10}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {r10, r11}, {}, {0x0, r11}, {}, {r10, r11}, {r10, r11}, {r10}, {0x0, r11}, {0x0, r11}, {}, {}, {}, {r9, r11}, {}, {r9, r11}, {}, {r10}, {r10}, {r9}, {}, {}, {}, {}, {}, {}, {r10}, {0x0, r11}], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [{}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6, r7}, {}, {0x0, r11}], 0x5, "710ce82b173d12"})
ftruncate(r2, 0x800)
lseek(r2, 0x200, 0x0)
r12 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r2, r12, 0x0, 0x8400fffffffa)

00:09:09 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f8", 0x16}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:09 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff080e04000000282459801b", 0x39}], 0x1)

[  549.717897][T32312] loop4: detected capacity change from 0 to 264192
[  549.734034][T32312] FAT-fs (loop4): bogus number of FAT sectors
[  549.740201][T32312] FAT-fs (loop4): Can't find a valid FAT filesystem
[  549.838681][T32315] loop1: detected capacity change from 0 to 264192
00:09:10 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, 0x0)
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:10 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff081004000000282459801b", 0x39}], 0x1)

00:09:10 executing program 3:
r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
creat(&(0x7f0000000080)='./bus\x00', 0xe8ecd7890640dc8a)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={<r2=>0x0, ""/256, <r3=>0x0, <r4=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, <r5=>0x0}, {}, {}, {}, {}, {}, {}, {r2, r4}, {}, {r3}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3, r4}, {}, {}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {r2}, {}, {}, {r2}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {r2}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {r2}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {r2, r4}, {0x0, r4}, {r2}, {r3}, {0x0, r4}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {r3}, {r2}, {}, {}, {r2}, {r2}, {}, {}, {r2}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3}, {0x0, r4}, {}, {}, {}, {}, {r2, r4}, {r2}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {}, {}, {}, {r3, r4}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {r3}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {}, {}, {0x0, r4}, {}, {}, {}, {r2}, {}, {r2, <r6=>0x0}, {}, {r3}, {r3}, {r2}, {}, {r3}, {r3}], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={<r7=>0x0, ""/256, <r8=>0x0, <r9=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7, r9}, {}, {r8}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {r7, r9}, {}, {}, {0x0, r9}, {r8, r9}, {}, {}, {}, {}, {r8}, {}, {0x0, r9}, {r8}, {0x0, r9}, {r8}, {0x0, r9}, {}, {}, {}, {r7}, {}, {}, {r7}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {r7}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {r7}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {r7, r9}, {0x0, r9}, {r7}, {r8}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {r8}, {r7}, {}, {}, {r7}, {r7}, {}, {}, {r7}, {}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8, r9}, {<r10=>0x0}, {}, {}, {}, {0x0, r9}, {r7, r9}, {r8}, {0x0, r9}, {}, {}, {}, {}, {r7, r9}, {r7}, {0x0, r9}, {}, {r7}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {r8}, {r7}, {}, {}, {}, {}, {r7, r9}, {r8, r9}, {}, {0x0, r9}, {}, {r8}, {0x0, r9}, {}, {}, {}, {}, {}, {r7}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r8}, {0x0, r9}, {r7}, {}, {}, {}, {}, {0x0, r9}, {r8}, {r7}, {}, {}, {}, {}, {}, {}, {r8, r9}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7, r9}, {}, {}, {}, {}, {}, {r7}, {}, {r8}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {0x0, r9}, {}, {r8}, {}, {0x0, r9}, {r7}, {}, {r8, r9}, {}, {}, {0x0, r9}, {}, {}, {}, {r7}, {}, {r7}, {}, {r8}, {r8}, {r7}, {}, {r8}, {r8}], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000054100)={<r11=>0x0, 0x0, "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", "7f84f950bc3ec7cbb574d4cce6837d86ab561758cd293b49e2723004ade3ff6bc4cd8ab6c3d29028d517764270535d6d629bc9622ab24174e5a82eb49717752bb8b478ae75905bfe168e30011c3b72bbc90b5acb5e794e12595acb0d7f7424db3fefe5120c32a3c1408b298541454f4fc6f13d3c90c2319ce29d9dfa24f807291ff51150a419ff83e72ef9d1f3bce1eb276cebf88a22d4c788872eaf1a39bc64cf74c59c103186a32536f26dc8e0d96322a38c94e0ef672de8674856a3a2257606e1cf0899846fddf1dbe9efc2d947cc9787435ca848472dd4d4c488fca97e0fdcf4e295366407026fc9b0f774f2035449f6230ea74d9dd00f2a55a809d7050ac0067283581cae66c508b1898f56132d823ac855176aef1250727ef716051237c2d7e4935e717f09d9328cb0ffba8bdc3db32b842f32dfcf4818447f23b2bb2700e7892cb30a48eba6015b6885450f9b65ac1b2dfd228219cb63fb4e58247302998cba3cf243da8e8c6af3ac1aa776e29c57c7f8f795353f77c76c994f32ee211f33e50e1aeca35f959a87e821a6a6af804836a703fd7d2311c3b62c4cf1cafbad88a84c5266f8a6d8b41994eba79f6d9e218a18d816a0136ac660a21ca981a087a68619caaae3b44ab721203108c1ffa22dc7aa4c10cd289f1432553a8062ef8279a7053e5020e35564a3703c027960797796393472c25540f69c715653c1afe784755e7abb46de5e95b821cbfb5149afa6642dde7fe789b7b35de46affc898add4793d089576bc86bda1afd15becce585fe2717e01d3aa3ba80371d168c874a2b3dd23fec395b09f7e92e92f8464247147ab36f14075adaf0b5ecefb83488f205efcd76cc4ee388d9f2fe1d2d5aa1e58b1e587652d8dbc01bc6ea18f1a133bb0260d8aca88be0b56ed09ddedac9f51bde8960fc05c608808c44e1e0097d25e63f8f7ac385ffc94b241c5d368bead9306075407c5a0795200a3c298080f82de5c8334964a7cd7e19e934ba1e76cf94791c5e216dcfc46c552e8b145193832e1f4b37e6cc34b93b55698e626111c6b895c6d7132271217a86a8414bea9f96748d43f14a76abb16e78c3263645230b6e3527318564de2e82e45a6eb5cc3f171572a7faefdb14e5cd964a0a220bdb1cc601ff03021864fc34a904b459e58506bc8c33bf418d685044373eb9f7763d5bd116ac5c285709b93a4daf5269bc1358e242be3ca0353a0a63ab56095ee250eb0cbcae9b414425bd73fab0b9746e6e50d6df63d4443f8e43666ef8d6d6e5b1af651eedbab3dbdaa5807249b6c2d8fa9d4a0384615491a0947078a642cd4640f33370b7f26f4cfba78c7f7ad901df8dbc0461fc144474aa02f05bcf450dc407ff21f36247c2c2c80bb4ea80a2d9ad4d68e197a76d3fc037f5cdb5fd9d0d3ecc0e8b2292b5b826a416fa4790dc53217db17181205b9c39820b8f05c8418ff654966056a5e57edbd0bce80aeedd5800ed3d03e89d98de301309632e567c71c6484f01485f229fb0e7f76fbee97f5dda01fa14ed9c7f56e72a63219af34bb82a0d1b1e5405975298b98db4539105df6cb2584a496e0243c40b77af2399216f197137e3ecb8f10a9823b295eee1345ffeeeea75d9f4327bca9b9185efc4cba69a2d2b366cdd8aec345cc8f720ef2fe3ed7248e9904ccffa900525af785b7859cb2f3cd46e8e47c068a8fb6f612e8322757ad9e5496075792b9bdf30567278f62f3a3fa19f70548a975d75d30c22b95dff754baa24543ae46b4eb8c123cb2e71a4774274b0210869458640765a0aef7d16bbe1f4cab20d793e166d621e63fe12ef0c46e1e20670c7f641173b9941e1d210fe828c3899ef5a26995ec6d14f98fbded071b62046bef69df47f6e91a97ace0559666e4c7045eed47a134cc94d4bd07fa0ba9febc4bf91d818a4f9d9dc4f2657c071a85245401dfe5a28067779d74af278208d618ae37721e28e5c09825eedae2096aa9bd7a8dc2f7df148eff903302b1ba4ec64ecf65ad0b6d03a8aa42eb12b90e9b77a2c1f185494a10025dae6a62139435f95fc7516f4594f735edac5346d14018f92ab3e8d0a631ca6c57a8d758360878693e4a1b99ee90fc9e10ff6e75470111f0563c48418eab3e4cbd2f99f1faeea5a87ef0816cf00df2b0ada9df77c31c156092175aa19e9f6b91c9cc835be09ff62acbd115a64e592ecdce765cda09b10b8edf64ae5720931730ade4fb5da001075ee705ca222224e49578429463947b2096d9d768f3e83c2356c2eb6a99a13d498f0f2286c92fb646aeda5a06d5e21224bb03760f923e3a7aac21b6c358aee30d84e47b41beebb4232e544c1d8283f8c091afa69238a3b55bcb275f41535ed31df09ce7759c416edb0225f56ed4225308278e433ed7543e86b3dc65c58be46af3dbd117eb7d1d248f4a12bba435879839ccda83049126c08631c8049dea59507fe3893b5d6b0bd08fb8809ca8c546dd6618ad6506c55206eff9ebca681048fb67dec905ff8e0e1d1e4c3ebc6e71158987aa757d9a82bf4b0478673245926b9162fe450f1de53154967e7afcf4da087ff38c322264ce63415e96f55dd9507d04cb0393280e232f7dc4d95b43c4f2b25ba44da2964c7e0daf362148605ddbd8bbc723a7606bc057f0a1c305babcd657c089f4b0e6b5682f05d72cedbb88f79a5030452210f573a4b1f30eca3ed7d340d6a69722da1daa53d8213728e3090b8a9e5ac4fd9f107180999e7662d34097eac5b7e5f4fbd5bc3d763a70d6e3fc68e0cb52c4738761bf61a3db2377cecb4293fff0172fd2f7d11f9e8c06e7876acbb7906e517b12f522ba0c801f56b7de80f4c4fa3d5d16fd554a1f5e8f49b49f597f95a4b4e71213123256af993cd6dd221ee37309a0bb8a48d81e207bfaa81e82054b83e671c6ece017b681f224bb7917d2838a8cb12ddfc416fbc1ee2752542be381e831d64dbc535f60e06f9563d321518ef5223fdc699dcf6dca8108f535bfe05704223e23023d8b005fe4ca28d720f8ee1c5a3a01010960c3826a9088169d754dea55c6c58d04c15dd3a6a34a9592a9a5de10aad1671607bbe1a1f3c69c78d548358d9decfc40ce386d9a7abc479d87ab34339c6592f9aea3f06162cd6de1d43355c7087bc40472842415caddb9de7a0487553a82199ff9dc4ffdda3b277a25a183d5937091e28542cce053050aedc478221ef80d4b99d816d7a77f980b3d5311b59624d3b23fc325218484b888c2ad88bd32f826ea6751b90a8bff0162c28c12bf44208b38a86d686933379fdea61a3e185e6a755813a09de749f7c2a5d368516713c70f98ea94a5b4428bcf179b0949999597dd130e5a4e59cc3afe741b1db96cbf273f6a78baedba093d77664b486802799fd8a5c1899078c71610ba42b25aec626958e6325ef642fd6784631f1d69d91d772b94f14520f4c9047d9b139674a97238b8f49693cb943de5b7b94ed37995d723e96b0aef0559b5fad79820594ecedb940826eae94f66f51c1fa4c4a25e2805aebee3f30a4ab111d053d4532fab4aaa6630f6bd50edeb1a3bb20e6751cb38a5afb11ae5baa77af5c45d11948b1e3c1fbe087ecb33778d3a7bbf2ff5020bf7a992f98ff0b6fe95f8688120688eff4d30b959e64b0b2cdd815aca43f6c17d2aef17175c5847f96f50bba16b9536899093706098132021bd3e01d5429997638fc52ac564e30af335fdf62b299731adfe81a8abef466509e795a2182092ff90c20d7ab2884397db69b4b25cf96b96cc4f73408cb9bc780a839d8290288cc63de79e8f481cfd2e20e4694fbbb046a0059bb06a347ef3512690892cd79eeca28c96e84ea256c4045e4d9d321a769aa6d79bd4fa2627f70b4fe924ddd2f7900e76a908dd951286ad6bbaf77d32bd19128db4eecb3bc2a551def1545c66e67ef90ebcf47bce46fd79328edee1d72ae4b08659d691acf2e91d2841f4b10bfb983fc052d98550012d6e23d9ef08e8a1042857d2ff2456fe0275da1360d5215f9b6d155587b2d3f9e0285b2ab7bd814568974452bd5fa8fae29b13d9c256c58f2f0d58a788a0bbf97129f8c83cd60c1396ab4cf9b398dd0527082c77b9b57fedd620eedff7a7921340ff6f95e69705dbada5bfd4e398b35bf5ac000fa054900313a9ae2ab9e999a05a5a5f547a5f286391de2d50afad2833b1a2e26270386757b9903a9b328d7e43d841abf2ca87a0f3bba50f4bbe28b91a10b1be678b149965bf02a8513baca0e7b0888417ff349714aaebfbd81260c4c8707cf068217ce152da82ecaa2b19602c08c545a7f5d1f7797cf2a280f4ad7065dac90d6f74969a26fe5d465d7cc0fdb7e2ee76de3bcb4a2b54e70e9be6e1ab3beb7dd519f50facad4463515d81bd074a084d26ece3b4aa758f47b7c0bbb8a89149cd13766569cce99634d0ea016f7a8db58915099e1f67591b4e4a7866911f872ce8b73244fc050115a2a2f68bad28cebb269e24e03bd6e77bd66d1e99518dde1e6ddcf1efb1dbfb9c2acfaeebfaf50ba2ee1b51ca42bf263a9d39429b1a81acc07b189d5550a2c2fbf46df37b74120b3ea4d8e0599b62ff88668ebb44de7cc4a8e2284195e3a733f34b681cc571b0fdb1ec1b731ae70e04fc8c521c91c7665d5fba0b219a905d24dbe7d299685a7dc1f6916159b8dd2c27f2df1e9c155f98537e2e56cfd4cd70e41c09898bcf970335693816aba28e0c34ccd6f91a58a3e7f4c232d79bbb0dc3db3acb9016797cf332e85737cc9727ccc6bfd1173f29bc7fac9be63f7a494a9a286f9d03ab3c8affa60a7c5cf2573d94b0991d8da67cae6164aaddca0abba91b0099dba023feb7934cf550c1a73a2c9e0a2a6d75a11ae2ac2b439639fff9029a7255912bf5d16d4a6d067a9793af71f64493e17c8d0e94f5d7a6b6c8dda78fd1ef339345c2e25713f2d6b84354746263396d48ee218b587a3a146a1c9296d888381f76468663d6f1bdc418770fd99bbe55d8b2204bb578cca6a9b1fbbbc7aaeb22aeabb60b052a68c0b7bf0e8680c2f3ee0308388147908e2e64d9f4d1921f34e5b72d7b512993a271942921205674c12b8a2b5447b488b214e627a0a1c03bf4cc36752734c6f88a977c4749d7cf53226ec635a4a2773d4464afd8c059487879a649ac7b435989e98772e18e344c40c4171b121df859adefd96f18ebd088f164930ddf7a0a677965445221bb06d505d570e7a8778605aaf27fc9cb6ab7b6e7dae26d7ccbf65f222cb47969831db3a4772aba0d52e7ad7afe933b1af0fdfd7b5b8d7864cc7efc8821aa61bcbf66fd0fe9ec3d7e0bab5301de40db8deb8851796478db103e7acfb4263560b28efdcd6cc0040e8c95e0d7f1b5102ba00a67c0b4965a7fa8610c46aa846e95c403c5fd87d025bfe8ed5225"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000055100)={<r12=>0x0})
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, <r13=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [{}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {r7, r11}, {}, {r12}, {}, {0x0, r13}], 0x5, "710ce82b173d12"})
ftruncate(r1, 0x800)
lseek(r1, 0x200, 0x0)
r14 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r1, r14, 0x0, 0x8400fffffffa)

00:09:10 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff081104000000282459801b", 0x39}], 0x1)

[  550.016345][T32318] loop3: detected capacity change from 0 to 264192
00:09:10 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff081204000000282459801b", 0x39}], 0x1)

[  550.153065][T32322] loop2: detected capacity change from 0 to 264192
00:09:10 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
creat(&(0x7f0000000080)='./bus\x00', 0xe8ecd7890640dc8a)
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:10 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff082504000000282459801b", 0x39}], 0x1)

00:09:10 executing program 0:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:10 executing program 3:
r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
creat(&(0x7f0000000080)='./bus\x00', 0xe8ecd7890640dc8a)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={<r2=>0x0, ""/256, <r3=>0x0, <r4=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2, r4}, {}, {r3}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3, r4}, {}, {}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {r2}, {}, {}, {r2}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {r2}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {r2}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {r2, r4}, {0x0, r4}, {r2}, {r3}, {0x0, r4}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {r3}, {r2}, {}, {}, {r2}, {r2}, {}, {}, {r2}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3}, {0x0, r4}, {}, {}, {}, {}, {r2, r4}, {r2}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {}, {}, {}, {r3, r4}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {r3}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {}, {}, {0x0, r4}, {}, {}, {}, {r2}, {}, {r2}, {}, {r3}, {r3}, {r2}, {}, {r3}, {r3}], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={<r5=>0x0, ""/256, <r6=>0x0, <r7=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r7}, {}, {r6}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {r5, r7}, {}, {}, {0x0, r7}, {r6, r7}, {}, {}, {}, {}, {r6}, {}, {0x0, r7}, {r6}, {0x0, r7}, {r6}, {0x0, r7}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {r5}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {r5}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r7}, {0x0, r7}, {r5}, {r6}, {0x0, r7}, {}, {0x0, r7}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {r6}, {r5}, {}, {}, {r5}, {r5}, {}, {}, {r5}, {}, {}, {0x0, r7}, {0x0, r7}, {0x0, r7}, {0x0, r7}, {r6, r7}, {}, {}, {}, {}, {0x0, r7}, {r5, r7}, {r6}, {0x0, r7}, {}, {}, {}, {}, {r5, r7}, {r5}, {0x0, r7}, {}, {r5}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {r6}, {r5}, {}, {}, {}, {}, {r5, r7}, {r6, r7}, {}, {0x0, r7}, {}, {r6}, {0x0, r7}, {}, {}, {}, {}, {}, {r5}, {0x0, r7}, {0x0, r7}, {}, {}, {}, {0x0, r7}, {r6}, {0x0, r7}, {r5}, {}, {}, {}, {}, {0x0, r7}, {r6}, {r5}, {}, {}, {}, {}, {}, {}, {r6, r7}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r7}, {}, {}, {}, {}, {}, {r5}, {}, {r6}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {0x0, r7}, {}, {r6}, {}, {0x0, r7}, {r5}, {}, {r6, r7}, {}, {}, {0x0, r7}, {}, {}, {}, {r5}, {}, {r5}, {}, {r6}, {r6}, {r5}, {}, {r6}, {r6}], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000054100)={0x0, 0x0, "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", "7f84f950bc3ec7cbb574d4cce6837d86ab561758cd293b49e2723004ade3ff6bc4cd8ab6c3d29028d517764270535d6d629bc9622ab24174e5a82eb49717752bb8b478ae75905bfe168e30011c3b72bbc90b5acb5e794e12595acb0d7f7424db3fefe5120c32a3c1408b298541454f4fc6f13d3c90c2319ce29d9dfa24f807291ff51150a419ff83e72ef9d1f3bce1eb276cebf88a22d4c788872eaf1a39bc64cf74c59c103186a32536f26dc8e0d96322a38c94e0ef672de8674856a3a2257606e1cf0899846fddf1dbe9efc2d947cc9787435ca848472dd4d4c488fca97e0fdcf4e295366407026fc9b0f774f2035449f6230ea74d9dd00f2a55a809d7050ac0067283581cae66c508b1898f56132d823ac855176aef1250727ef716051237c2d7e4935e717f09d9328cb0ffba8bdc3db32b842f32dfcf4818447f23b2bb2700e7892cb30a48eba6015b6885450f9b65ac1b2dfd228219cb63fb4e58247302998cba3cf243da8e8c6af3ac1aa776e29c57c7f8f795353f77c76c994f32ee211f33e50e1aeca35f959a87e821a6a6af804836a703fd7d2311c3b62c4cf1cafbad88a84c5266f8a6d8b41994eba79f6d9e218a18d816a0136ac660a21ca981a087a68619caaae3b44ab721203108c1ffa22dc7aa4c10cd289f1432553a8062ef8279a7053e5020e35564a3703c027960797796393472c25540f69c715653c1afe784755e7abb46de5e95b821cbfb5149afa6642dde7fe789b7b35de46affc898add4793d089576bc86bda1afd15becce585fe2717e01d3aa3ba80371d168c874a2b3dd23fec395b09f7e92e92f8464247147ab36f14075adaf0b5ecefb83488f205efcd76cc4ee388d9f2fe1d2d5aa1e58b1e587652d8dbc01bc6ea18f1a133bb0260d8aca88be0b56ed09ddedac9f51bde8960fc05c608808c44e1e0097d25e63f8f7ac385ffc94b241c5d368bead9306075407c5a0795200a3c298080f82de5c8334964a7cd7e19e934ba1e76cf94791c5e216dcfc46c552e8b145193832e1f4b37e6cc34b93b55698e626111c6b895c6d7132271217a86a8414bea9f96748d43f14a76abb16e78c3263645230b6e3527318564de2e82e45a6eb5cc3f171572a7faefdb14e5cd964a0a220bdb1cc601ff03021864fc34a904b459e58506bc8c33bf418d685044373eb9f7763d5bd116ac5c285709b93a4daf5269bc1358e242be3ca0353a0a63ab56095ee250eb0cbcae9b414425bd73fab0b9746e6e50d6df63d4443f8e43666ef8d6d6e5b1af651eedbab3dbdaa5807249b6c2d8fa9d4a0384615491a0947078a642cd4640f33370b7f26f4cfba78c7f7ad901df8dbc0461fc144474aa02f05bcf450dc407ff21f36247c2c2c80bb4ea80a2d9ad4d68e197a76d3fc037f5cdb5fd9d0d3ecc0e8b2292b5b826a416fa4790dc53217db17181205b9c39820b8f05c8418ff654966056a5e57edbd0bce80aeedd5800ed3d03e89d98de301309632e567c71c6484f01485f229fb0e7f76fbee97f5dda01fa14ed9c7f56e72a63219af34bb82a0d1b1e5405975298b98db4539105df6cb2584a496e0243c40b77af2399216f197137e3ecb8f10a9823b295eee1345ffeeeea75d9f4327bca9b9185efc4cba69a2d2b366cdd8aec345cc8f720ef2fe3ed7248e9904ccffa900525af785b7859cb2f3cd46e8e47c068a8fb6f612e8322757ad9e5496075792b9bdf30567278f62f3a3fa19f70548a975d75d30c22b95dff754baa24543ae46b4eb8c123cb2e71a4774274b0210869458640765a0aef7d16bbe1f4cab20d793e166d621e63fe12ef0c46e1e20670c7f641173b9941e1d210fe828c3899ef5a26995ec6d14f98fbded071b62046bef69df47f6e91a97ace0559666e4c7045eed47a134cc94d4bd07fa0ba9febc4bf91d818a4f9d9dc4f2657c071a85245401dfe5a28067779d74af278208d618ae37721e28e5c09825eedae2096aa9bd7a8dc2f7df148eff903302b1ba4ec64ecf65ad0b6d03a8aa42eb12b90e9b77a2c1f185494a10025dae6a62139435f95fc7516f4594f735edac5346d14018f92ab3e8d0a631ca6c57a8d758360878693e4a1b99ee90fc9e10ff6e75470111f0563c48418eab3e4cbd2f99f1faeea5a87ef0816cf00df2b0ada9df77c31c156092175aa19e9f6b91c9cc835be09ff62acbd115a64e592ecdce765cda09b10b8edf64ae5720931730ade4fb5da001075ee705ca222224e49578429463947b2096d9d768f3e83c2356c2eb6a99a13d498f0f2286c92fb646aeda5a06d5e21224bb03760f923e3a7aac21b6c358aee30d84e47b41beebb4232e544c1d8283f8c091afa69238a3b55bcb275f41535ed31df09ce7759c416edb0225f56ed4225308278e433ed7543e86b3dc65c58be46af3dbd117eb7d1d248f4a12bba435879839ccda83049126c08631c8049dea59507fe3893b5d6b0bd08fb8809ca8c546dd6618ad6506c55206eff9ebca681048fb67dec905ff8e0e1d1e4c3ebc6e71158987aa757d9a82bf4b0478673245926b9162fe450f1de53154967e7afcf4da087ff38c322264ce63415e96f55dd9507d04cb0393280e232f7dc4d95b43c4f2b25ba44da2964c7e0daf362148605ddbd8bbc723a7606bc057f0a1c305babcd657c089f4b0e6b5682f05d72cedbb88f79a5030452210f573a4b1f30eca3ed7d340d6a69722da1daa53d8213728e3090b8a9e5ac4fd9f107180999e7662d34097eac5b7e5f4fbd5bc3d763a70d6e3fc68e0cb52c4738761bf61a3db2377cecb4293fff0172fd2f7d11f9e8c06e7876acbb7906e517b12f522ba0c801f56b7de80f4c4fa3d5d16fd554a1f5e8f49b49f597f95a4b4e71213123256af993cd6dd221ee37309a0bb8a48d81e207bfaa81e82054b83e671c6ece017b681f224bb7917d2838a8cb12ddfc416fbc1ee2752542be381e831d64dbc535f60e06f9563d321518ef5223fdc699dcf6dca8108f535bfe05704223e23023d8b005fe4ca28d720f8ee1c5a3a01010960c3826a9088169d754dea55c6c58d04c15dd3a6a34a9592a9a5de10aad1671607bbe1a1f3c69c78d548358d9decfc40ce386d9a7abc479d87ab34339c6592f9aea3f06162cd6de1d43355c7087bc40472842415caddb9de7a0487553a82199ff9dc4ffdda3b277a25a183d5937091e28542cce053050aedc478221ef80d4b99d816d7a77f980b3d5311b59624d3b23fc325218484b888c2ad88bd32f826ea6751b90a8bff0162c28c12bf44208b38a86d686933379fdea61a3e185e6a755813a09de749f7c2a5d368516713c70f98ea94a5b4428bcf179b0949999597dd130e5a4e59cc3afe741b1db96cbf273f6a78baedba093d77664b486802799fd8a5c1899078c71610ba42b25aec626958e6325ef642fd6784631f1d69d91d772b94f14520f4c9047d9b139674a97238b8f49693cb943de5b7b94ed37995d723e96b0aef0559b5fad79820594ecedb940826eae94f66f51c1fa4c4a25e2805aebee3f30a4ab111d053d4532fab4aaa6630f6bd50edeb1a3bb20e6751cb38a5afb11ae5baa77af5c45d11948b1e3c1fbe087ecb33778d3a7bbf2ff5020bf7a992f98ff0b6fe95f8688120688eff4d30b959e64b0b2cdd815aca43f6c17d2aef17175c5847f96f50bba16b9536899093706098132021bd3e01d5429997638fc52ac564e30af335fdf62b299731adfe81a8abef466509e795a2182092ff90c20d7ab2884397db69b4b25cf96b96cc4f73408cb9bc780a839d8290288cc63de79e8f481cfd2e20e4694fbbb046a0059bb06a347ef3512690892cd79eeca28c96e84ea256c4045e4d9d321a769aa6d79bd4fa2627f70b4fe924ddd2f7900e76a908dd951286ad6bbaf77d32bd19128db4eecb3bc2a551def1545c66e67ef90ebcf47bce46fd79328edee1d72ae4b08659d691acf2e91d2841f4b10bfb983fc052d98550012d6e23d9ef08e8a1042857d2ff2456fe0275da1360d5215f9b6d155587b2d3f9e0285b2ab7bd814568974452bd5fa8fae29b13d9c256c58f2f0d58a788a0bbf97129f8c83cd60c1396ab4cf9b398dd0527082c77b9b57fedd620eedff7a7921340ff6f95e69705dbada5bfd4e398b35bf5ac000fa054900313a9ae2ab9e999a05a5a5f547a5f286391de2d50afad2833b1a2e26270386757b9903a9b328d7e43d841abf2ca87a0f3bba50f4bbe28b91a10b1be678b149965bf02a8513baca0e7b0888417ff349714aaebfbd81260c4c8707cf068217ce152da82ecaa2b19602c08c545a7f5d1f7797cf2a280f4ad7065dac90d6f74969a26fe5d465d7cc0fdb7e2ee76de3bcb4a2b54e70e9be6e1ab3beb7dd519f50facad4463515d81bd074a084d26ece3b4aa758f47b7c0bbb8a89149cd13766569cce99634d0ea016f7a8db58915099e1f67591b4e4a7866911f872ce8b73244fc050115a2a2f68bad28cebb269e24e03bd6e77bd66d1e99518dde1e6ddcf1efb1dbfb9c2acfaeebfaf50ba2ee1b51ca42bf263a9d39429b1a81acc07b189d5550a2c2fbf46df37b74120b3ea4d8e0599b62ff88668ebb44de7cc4a8e2284195e3a733f34b681cc571b0fdb1ec1b731ae70e04fc8c521c91c7665d5fba0b219a905d24dbe7d299685a7dc1f6916159b8dd2c27f2df1e9c155f98537e2e56cfd4cd70e41c09898bcf970335693816aba28e0c34ccd6f91a58a3e7f4c232d79bbb0dc3db3acb9016797cf332e85737cc9727ccc6bfd1173f29bc7fac9be63f7a494a9a286f9d03ab3c8affa60a7c5cf2573d94b0991d8da67cae6164aaddca0abba91b0099dba023feb7934cf550c1a73a2c9e0a2a6d75a11ae2ac2b439639fff9029a7255912bf5d16d4a6d067a9793af71f64493e17c8d0e94f5d7a6b6c8dda78fd1ef339345c2e25713f2d6b84354746263396d48ee218b587a3a146a1c9296d888381f76468663d6f1bdc418770fd99bbe55d8b2204bb578cca6a9b1fbbbc7aaeb22aeabb60b052a68c0b7bf0e8680c2f3ee0308388147908e2e64d9f4d1921f34e5b72d7b512993a271942921205674c12b8a2b5447b488b214e627a0a1c03bf4cc36752734c6f88a977c4749d7cf53226ec635a4a2773d4464afd8c059487879a649ac7b435989e98772e18e344c40c4171b121df859adefd96f18ebd088f164930ddf7a0a677965445221bb06d505d570e7a8778605aaf27fc9cb6ab7b6e7dae26d7ccbf65f222cb47969831db3a4772aba0d52e7ad7afe933b1af0fdfd7b5b8d7864cc7efc8821aa61bcbf66fd0fe9ec3d7e0bab5301de40db8deb8851796478db103e7acfb4263560b28efdcd6cc0040e8c95e0d7f1b5102ba00a67c0b4965a7fa8610c46aa846e95c403c5fd87d025bfe8ed5225"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000055100))
r8 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={<r9=>0x0, ""/256, <r10=>0x0, <r11=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r8, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {}, {r10}, {r10}, {0x0, r11}, {}, {}, {}, {}, {r10, r11}, {0x0, r11}, {}, {0x0, r11}, {}, {}, {0x0, r11}, {0x0, r11}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9, r11}, {}, {}, {0x0, r11}, {r10, r11}, {}, {r9, r11}, {}, {}, {r10}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {r9, r11}, {}, {}, {}, {r10}, {r9}, {}, {r10}, {}, {0x0, r11}, {0x0, r11}, {}, {}, {}, {}, {0x0, r11}, {0x0, r11}, {r10}, {r9, r11}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {r10}, {}, {}, {}, {r9}, {0x0, r11}, {}, {0x0, r11}, {0x0, r11}, {}, {}, {0x0, r11}, {}, {r9}, {0x0, r11}, {}, {r10}, {0x0, r11}, {0x0, r11}, {}, {}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {}, {0x0, r11}, {}, {r9, r11}, {}, {}, {r9, r11}, {0x0, r11}, {r10, r11}, {}, {}, {}, {}, {}, {r10, r11}, {}, {r9}, {0x0, r11}, {}, {}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {r10, r11}, {}, {}, {r9}, {}, {r10, r11}, {r9, r11}, {0x0, r11}, {}, {}, {r10, r11}, {r10}, {}, {}, {r9}, {}, {}, {}, {0x0, r11}, {}, {0x0, r11}, {0x0, r11}, {}, {0x0, r11}, {}, {0x0, r11}, {r10}, {}, {}, {}, {}, {}, {r9, r11}, {r10}, {}, {}, {}, {r10}, {0x0, r11}, {}, {}, {r9}, {r9}, {0x0, r11}, {r9}, {r10}, {}, {}, {}, {r9}, {0x0, r11}, {r10}, {0x0, r11}, {r9, r11}, {}, {0x0, r11}, {}, {}, {0x0, r11}, {}, {r9}, {}, {r9}, {r9}, {0x0, r11}, {r10, r11}, {0x0, r11}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {r9}, {}, {r9}, {r10}, {}, {r9, r11}, {}, {}, {}, {r10}, {0x0, r11}, {r9}, {}, {r10}, {}, {}, {r10}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {r10, r11}, {}, {0x0, r11}, {}, {r10, r11}, {r10, r11}, {r10}, {0x0, r11}, {0x0, r11}, {}, {}, {}, {r9, r11}, {}, {r9, r11}, {}, {r10}, {r10}, {r9}, {}, {}, {}, {}, {}, {}, {r10}, {0x0, r11}], 0x0, "2156816c73038c"})
ftruncate(r1, 0x800)
lseek(r1, 0x200, 0x0)
r12 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r1, r12, 0x0, 0x8400fffffffa)

00:09:10 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff084804000000282459801b", 0x39}], 0x1)

[  550.400429][T32328] loop1: detected capacity change from 0 to 264192
00:09:10 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f8", 0x16}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:10 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff084c04000000282459801b", 0x39}], 0x1)

[  550.591239][T32333] validate_nla: 22 callbacks suppressed
[  550.591255][T32333] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  550.660383][T32335] loop3: detected capacity change from 0 to 264192
[  550.754125][T32338] loop4: detected capacity change from 0 to 264192
[  550.765313][T32339] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  550.784490][T32338] FAT-fs (loop4): bogus number of FAT sectors
[  550.790617][T32338] FAT-fs (loop4): Can't find a valid FAT filesystem
00:09:11 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
creat(&(0x7f0000000080)='./bus\x00', 0xe8ecd7890640dc8a)
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:11 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff086004000000282459801b", 0x39}], 0x1)

00:09:11 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(0x0)
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:11 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
creat(&(0x7f0000000080)='./bus\x00', 0xe8ecd7890640dc8a)
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={<r1=>0x0, ""/256, <r2=>0x0, <r3=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1, r3}, {}, {r2}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {r1, r3}, {}, {}, {0x0, r3}, {r2, r3}, {}, {}, {}, {}, {r2}, {}, {0x0, r3}, {r2}, {0x0, r3}, {r2}, {0x0, r3}, {}, {}, {}, {r1}, {}, {}, {r1}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {r1}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {r1}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {r1, r3}, {0x0, r3}, {r1}, {r2}, {0x0, r3}, {}, {0x0, r3}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {r2}, {r1}, {}, {}, {r1}, {r1}, {}, {}, {r1}, {}, {}, {0x0, r3}, {0x0, r3}, {0x0, r3}, {0x0, r3}, {r2, r3}, {}, {}, {}, {}, {0x0, r3}, {r1, r3}, {r2}, {0x0, r3}, {}, {}, {}, {}, {r1, r3}, {r1}, {0x0, r3}, {}, {r1}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {r2}, {r1}, {}, {}, {}, {}, {r1, r3}, {r2, r3}, {}, {0x0, r3}, {}, {r2}, {0x0, r3}, {}, {}, {}, {}, {}, {r1}, {0x0, r3}, {0x0, r3}, {}, {}, {}, {0x0, r3}, {r2}, {0x0, r3}, {r1}, {}, {}, {}, {}, {0x0, r3}, {r2}, {r1}, {}, {}, {}, {}, {}, {}, {r2, r3}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1, r3}, {}, {}, {}, {}, {}, {r1}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {0x0, r3}, {}, {r2}, {}, {0x0, r3}, {r1}, {}, {r2, r3}, {}, {}, {0x0, r3}, {}, {}, {}, {r1}, {}, {r1}, {}, {r2}, {r2}, {r1}, {}, {r2}, {r2}], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440))
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r4, 0x0, 0x8400fffffffa)

00:09:11 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff086804000000282459801b", 0x39}], 0x1)

[  551.078204][T32343] loop1: detected capacity change from 0 to 264192
[  551.091040][T32344] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  551.108565][T32345] loop3: detected capacity change from 0 to 264192
00:09:11 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff086c04000000282459801b", 0x39}], 0x1)

[  551.217274][T32348] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  551.241077][T32349] loop2: detected capacity change from 0 to 264192
00:09:11 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff087404000000282459801b", 0x39}], 0x1)

00:09:11 executing program 0:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  551.363838][T32351] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
00:09:11 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
creat(&(0x7f0000000080)='./bus\x00', 0xe8ecd7890640dc8a)
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:11 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff087704000000282459801b", 0x39}], 0x1)

[  551.499339][T32354] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
00:09:11 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f8", 0x16}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:11 executing program 3:
r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
creat(&(0x7f0000000080)='./bus\x00', 0xe8ecd7890640dc8a)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={<r2=>0x0, ""/256, <r3=>0x0, <r4=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, <r5=>0x0}, {}, {}, {}, {}, {}, {}, {r2, r4}, {}, {r3}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3, r4}, {}, {}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {r2}, {}, {}, {r2}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {r2}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {r2}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {r2, r4}, {0x0, r4}, {r2}, {r3}, {0x0, r4}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {r3}, {r2}, {}, {}, {r2}, {r2}, {}, {}, {r2}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3}, {0x0, r4}, {}, {}, {}, {}, {r2, r4}, {r2}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {}, {}, {}, {r3, r4}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {r3}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {}, {}, {0x0, r4}, {}, {}, {}, {r2}, {}, {r2, <r6=>0x0}, {}, {r3}, {r3}, {r2}, {}, {r3}, {r3}], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={<r7=>0x0, ""/256, <r8=>0x0, <r9=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7, r9}, {}, {r8}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {r7, r9}, {}, {}, {0x0, r9}, {r8, r9}, {}, {}, {}, {}, {r8}, {}, {0x0, r9}, {r8}, {0x0, r9}, {r8}, {0x0, r9}, {}, {}, {}, {r7}, {}, {}, {r7}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {r7}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {r7}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {r7, r9}, {0x0, r9}, {r7}, {r8}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {r8}, {r7}, {}, {}, {r7}, {r7}, {}, {}, {r7}, {}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8, r9}, {<r10=>0x0}, {}, {}, {}, {0x0, r9}, {r7, r9}, {r8}, {0x0, r9}, {}, {}, {}, {}, {r7, r9}, {r7}, {0x0, r9}, {}, {r7}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {r8}, {r7}, {}, {}, {}, {}, {r7, r9}, {r8, r9}, {}, {0x0, r9}, {}, {r8}, {0x0, r9}, {}, {}, {}, {}, {}, {r7}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {r8}, {0x0, r9}, {r7}, {}, {}, {}, {}, {0x0, r9}, {r8}, {r7}, {}, {}, {}, {}, {}, {}, {r8, r9}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7, r9}, {}, {}, {}, {}, {}, {r7}, {}, {r8}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {0x0, r9}, {}, {r8}, {}, {0x0, r9}, {r7}, {}, {r8, r9}, {}, {}, {0x0, r9}, {}, {}, {}, {r7}, {}, {r7}, {}, {r8}, {r8}, {r7}, {}, {r8}, {r8}], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000054100)={<r11=>0x0, 0x0, "56073890ddc3aee127e5613f7a1099e10c2802bec018d812e589029cb587e170caf1a9d1cf6cf4d0dd5ce02ef9b7ea4b2782ada756284196b35864248edc88337bfd0d19c2613c6159dcd5d2112b91653b8c66b03a5215523c056f8cc6a02ab0afe1a0c62483e28d36c9f44d1ccebad8da641fd92b27e6db447749b8c223566b4bbd88a8b5e220c1e2a8d79b2790cfabb406cfe1699aa1569f3c5d4e3d87d3c15fdeceab933a7f3b6b14f8418d858ecb23f27943a5e55eba5b26cbda51ee5433e06f71857f513e74b27e0ccc746c2f30d945e7bc219c0a8ceba3622a32ced0e520680de8c6762af7799362d1d03579a5b060b1684946c3adc58c6a64c4645c73", "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"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000055100)={<r12=>0x0})
r13 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={<r14=>0x0, ""/256, <r15=>0x0, <r16=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r13, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {}, {r15}, {r15}, {0x0, r16}, {}, {}, {}, {}, {r15, r16}, {0x0, r16}, {}, {0x0, r16}, {}, {}, {0x0, r16}, {0x0, r16}, {}, {}, {}, {}, {}, {0x0, r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14, r16}, {}, {}, {0x0, r16}, {r15, r16}, {}, {r14, r16}, {}, {}, {r15}, {}, {0x0, r16}, {}, {}, {}, {}, {}, {r14, r16}, {}, {}, {}, {r15}, {r14}, {}, {r15}, {}, {0x0, r16}, {0x0, r16}, {}, {}, {}, {}, {0x0, r16}, {0x0, r16}, {r15}, {r14, r16}, {}, {r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r16}, {r15}, {}, {}, {}, {r14}, {0x0, r16}, {}, {0x0, r16}, {0x0, r16}, {}, {}, {0x0, r16}, {}, {r14}, {0x0, r16}, {}, {r15}, {0x0, r16}, {0x0, r16}, {}, {}, {0x0, r16}, {0x0, r16}, {0x0, r16}, {}, {0x0, r16}, {}, {r14, r16}, {}, {}, {r14, r16}, {0x0, r16}, {r15, r16}, {}, {}, {}, {}, {}, {r15, r16}, {}, {r14}, {0x0, r16}, {}, {}, {0x0, r16}, {0x0, r16}, {0x0, r16}, {r15, r16}, {}, {}, {r14}, {}, {r15, r16}, {r14, r16}, {0x0, r16}, {}, {}, {r15, r16}, {r15}, {}, {}, {r14}, {}, {}, {}, {0x0, r16}, {}, {0x0, r16}, {0x0, r16}, {}, {0x0, r16}, {}, {0x0, r16}, {r15}, {}, {}, {}, {}, {}, {r14, r16}, {r15}, {}, {}, {}, {r15}, {0x0, r16}, {}, {}, {r14}, {r14}, {0x0, r16}, {r14}, {r15}, {}, {}, {}, {r14}, {0x0, r16}, {r15}, {0x0, r16}, {r14, r16}, {}, {0x0, r16}, {}, {}, {0x0, r16}, {}, {r14}, {}, {r14}, {r14}, {0x0, r16}, {r15, r16}, {0x0, r16}, {}, {}, {}, {}, {}, {r15}, {}, {}, {}, {r14}, {}, {r14}, {r15}, {}, {r14, r16}, {}, {}, {}, {r15}, {0x0, r16}, {r14}, {}, {r15}, {}, {}, {r15}, {0x0, r16}, {}, {}, {}, {}, {}, {}, {}, {r15, r16}, {}, {0x0, r16}, {}, {r15, r16}, {r15, r16}, {r15}, {0x0, r16}, {0x0, r16}, {}, {}, {}, {r14, r16}, {}, {r14, r16}, {}, {r15}, {r15}, {r14}, {}, {}, {}, {}, {}, {}, {r15}, {0x0, r16}], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055500)={0x0, [{}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {r7, r11}, {}, {r12}, {}, {0x0, r16}], 0x5, "710ce82b173d12"})
ftruncate(r1, 0x800)
lseek(r1, 0x200, 0x0)
r17 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r1, r17, 0x0, 0x8400fffffffa)

00:09:11 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff087a04000000282459801b", 0x39}], 0x1)

[  551.629875][T32357] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  551.705119][T32359] loop1: detected capacity change from 0 to 264192
00:09:11 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff080005000000282459801b", 0x39}], 0x1)

[  551.762410][T32362] loop4: detected capacity change from 0 to 264192
[  551.775197][T32363] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  551.787090][T32362] FAT-fs (loop4): bogus number of FAT sectors
[  551.793240][T32362] FAT-fs (loop4): Can't find a valid FAT filesystem
[  551.844859][T32365] loop3: detected capacity change from 0 to 264192
[  551.920971][T32367] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
00:09:12 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff080006000000282459801b", 0x39}], 0x1)

00:09:12 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
creat(&(0x7f0000000080)='./bus\x00', 0xe8ecd7890640dc8a)
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa)

00:09:12 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(0x0)
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:12 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff080007000000282459801b", 0x39}], 0x1)

00:09:12 executing program 3:
r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
creat(&(0x7f0000000080)='./bus\x00', 0xe8ecd7890640dc8a)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6900)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={<r2=>0x0, ""/256, <r3=>0x0, <r4=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2, r4}, {}, {r3}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3, r4}, {}, {}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {r2}, {}, {}, {r2}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {r2}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {r2}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {r2, r4}, {0x0, r4}, {r2}, {r3}, {0x0, r4}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {r3}, {r2}, {}, {}, {r2}, {r2}, {}, {}, {r2}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3}, {0x0, r4}, {}, {}, {}, {}, {r2, r4}, {r2}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {}, {}, {}, {r3, r4}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {r3}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {}, {}, {0x0, r4}, {}, {}, {}, {r2}, {}, {r2}, {}, {r3}, {r3}, {r2}, {}, {r3}, {r3}], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={<r5=>0x0, ""/256, <r6=>0x0, <r7=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r7}, {}, {r6}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {r5, r7}, {}, {}, {0x0, r7}, {r6, r7}, {}, {}, {}, {}, {r6}, {}, {0x0, r7}, {r6}, {0x0, r7}, {r6}, {0x0, r7}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {r5}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {r5}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r7}, {0x0, r7}, {r5}, {r6}, {0x0, r7}, {}, {0x0, r7}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {r6}, {r5}, {}, {}, {r5}, {r5}, {}, {}, {r5}, {}, {}, {0x0, r7}, {0x0, r7}, {0x0, r7}, {0x0, r7}, {r6, r7}, {}, {}, {}, {}, {0x0, r7}, {r5, r7}, {r6}, {0x0, r7}, {}, {}, {}, {}, {r5, r7}, {r5}, {0x0, r7}, {}, {r5}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {r6}, {r5}, {}, {}, {}, {}, {r5, r7}, {r6, r7}, {}, {0x0, r7}, {}, {r6}, {0x0, r7}, {}, {}, {}, {}, {}, {r5}, {0x0, r7}, {0x0, r7}, {}, {}, {}, {0x0, r7}, {r6}, {0x0, r7}, {r5}, {}, {}, {}, {}, {0x0, r7}, {r6}, {r5}, {}, {}, {}, {}, {}, {}, {r6, r7}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r7}, {}, {}, {}, {}, {}, {r5}, {}, {r6}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {0x0, r7}, {}, {r6}, {}, {0x0, r7}, {r5}, {}, {r6, r7}, {}, {}, {0x0, r7}, {}, {}, {}, {r5}, {}, {r5}, {}, {r6}, {r6}, {r5}, {}, {r6}, {r6}], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000054100)={0x0, 0x0, "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", "7f84f950bc3ec7cbb574d4cce6837d86ab561758cd293b49e2723004ade3ff6bc4cd8ab6c3d29028d517764270535d6d629bc9622ab24174e5a82eb49717752bb8b478ae75905bfe168e30011c3b72bbc90b5acb5e794e12595acb0d7f7424db3fefe5120c32a3c1408b298541454f4fc6f13d3c90c2319ce29d9dfa24f807291ff51150a419ff83e72ef9d1f3bce1eb276cebf88a22d4c788872eaf1a39bc64cf74c59c103186a32536f26dc8e0d96322a38c94e0ef672de8674856a3a2257606e1cf0899846fddf1dbe9efc2d947cc9787435ca848472dd4d4c488fca97e0fdcf4e295366407026fc9b0f774f2035449f6230ea74d9dd00f2a55a809d7050ac0067283581cae66c508b1898f56132d823ac855176aef1250727ef716051237c2d7e4935e717f09d9328cb0ffba8bdc3db32b842f32dfcf4818447f23b2bb2700e7892cb30a48eba6015b6885450f9b65ac1b2dfd228219cb63fb4e58247302998cba3cf243da8e8c6af3ac1aa776e29c57c7f8f795353f77c76c994f32ee211f33e50e1aeca35f959a87e821a6a6af804836a703fd7d2311c3b62c4cf1cafbad88a84c5266f8a6d8b41994eba79f6d9e218a18d816a0136ac660a21ca981a087a68619caaae3b44ab721203108c1ffa22dc7aa4c10cd289f1432553a8062ef8279a7053e5020e35564a3703c027960797796393472c25540f69c715653c1afe784755e7abb46de5e95b821cbfb5149afa6642dde7fe789b7b35de46affc898add4793d089576bc86bda1afd15becce585fe2717e01d3aa3ba80371d168c874a2b3dd23fec395b09f7e92e92f8464247147ab36f14075adaf0b5ecefb83488f205efcd76cc4ee388d9f2fe1d2d5aa1e58b1e587652d8dbc01bc6ea18f1a133bb0260d8aca88be0b56ed09ddedac9f51bde8960fc05c608808c44e1e0097d25e63f8f7ac385ffc94b241c5d368bead9306075407c5a0795200a3c298080f82de5c8334964a7cd7e19e934ba1e76cf94791c5e216dcfc46c552e8b145193832e1f4b37e6cc34b93b55698e626111c6b895c6d7132271217a86a8414bea9f96748d43f14a76abb16e78c3263645230b6e3527318564de2e82e45a6eb5cc3f171572a7faefdb14e5cd964a0a220bdb1cc601ff03021864fc34a904b459e58506bc8c33bf418d685044373eb9f7763d5bd116ac5c285709b93a4daf5269bc1358e242be3ca0353a0a63ab56095ee250eb0cbcae9b414425bd73fab0b9746e6e50d6df63d4443f8e43666ef8d6d6e5b1af651eedbab3dbdaa5807249b6c2d8fa9d4a0384615491a0947078a642cd4640f33370b7f26f4cfba78c7f7ad901df8dbc0461fc144474aa02f05bcf450dc407ff21f36247c2c2c80bb4ea80a2d9ad4d68e197a76d3fc037f5cdb5fd9d0d3ecc0e8b2292b5b826a416fa4790dc53217db17181205b9c39820b8f05c8418ff654966056a5e57edbd0bce80aeedd5800ed3d03e89d98de301309632e567c71c6484f01485f229fb0e7f76fbee97f5dda01fa14ed9c7f56e72a63219af34bb82a0d1b1e5405975298b98db4539105df6cb2584a496e0243c40b77af2399216f197137e3ecb8f10a9823b295eee1345ffeeeea75d9f4327bca9b9185efc4cba69a2d2b366cdd8aec345cc8f720ef2fe3ed7248e9904ccffa900525af785b7859cb2f3cd46e8e47c068a8fb6f612e8322757ad9e5496075792b9bdf30567278f62f3a3fa19f70548a975d75d30c22b95dff754baa24543ae46b4eb8c123cb2e71a4774274b0210869458640765a0aef7d16bbe1f4cab20d793e166d621e63fe12ef0c46e1e20670c7f641173b9941e1d210fe828c3899ef5a26995ec6d14f98fbded071b62046bef69df47f6e91a97ace0559666e4c7045eed47a134cc94d4bd07fa0ba9febc4bf91d818a4f9d9dc4f2657c071a85245401dfe5a28067779d74af278208d618ae37721e28e5c09825eedae2096aa9bd7a8dc2f7df148eff903302b1ba4ec64ecf65ad0b6d03a8aa42eb12b90e9b77a2c1f185494a10025dae6a62139435f95fc7516f4594f735edac5346d14018f92ab3e8d0a631ca6c57a8d758360878693e4a1b99ee90fc9e10ff6e75470111f0563c48418eab3e4cbd2f99f1faeea5a87ef0816cf00df2b0ada9df77c31c156092175aa19e9f6b91c9cc835be09ff62acbd115a64e592ecdce765cda09b10b8edf64ae5720931730ade4fb5da001075ee705ca222224e49578429463947b2096d9d768f3e83c2356c2eb6a99a13d498f0f2286c92fb646aeda5a06d5e21224bb03760f923e3a7aac21b6c358aee30d84e47b41beebb4232e544c1d8283f8c091afa69238a3b55bcb275f41535ed31df09ce7759c416edb0225f56ed4225308278e433ed7543e86b3dc65c58be46af3dbd117eb7d1d248f4a12bba435879839ccda83049126c08631c8049dea59507fe3893b5d6b0bd08fb8809ca8c546dd6618ad6506c55206eff9ebca681048fb67dec905ff8e0e1d1e4c3ebc6e71158987aa757d9a82bf4b0478673245926b9162fe450f1de53154967e7afcf4da087ff38c322264ce63415e96f55dd9507d04cb0393280e232f7dc4d95b43c4f2b25ba44da2964c7e0daf362148605ddbd8bbc723a7606bc057f0a1c305babcd657c089f4b0e6b5682f05d72cedbb88f79a5030452210f573a4b1f30eca3ed7d340d6a69722da1daa53d8213728e3090b8a9e5ac4fd9f107180999e7662d34097eac5b7e5f4fbd5bc3d763a70d6e3fc68e0cb52c4738761bf61a3db2377cecb4293fff0172fd2f7d11f9e8c06e7876acbb7906e517b12f522ba0c801f56b7de80f4c4fa3d5d16fd554a1f5e8f49b49f597f95a4b4e71213123256af993cd6dd221ee37309a0bb8a48d81e207bfaa81e82054b83e671c6ece017b681f224bb7917d2838a8cb12ddfc416fbc1ee2752542be381e831d64dbc535f60e06f9563d321518ef5223fdc699dcf6dca8108f535bfe05704223e23023d8b005fe4ca28d720f8ee1c5a3a01010960c3826a9088169d754dea55c6c58d04c15dd3a6a34a9592a9a5de10aad1671607bbe1a1f3c69c78d548358d9decfc40ce386d9a7abc479d87ab34339c6592f9aea3f06162cd6de1d43355c7087bc40472842415caddb9de7a0487553a82199ff9dc4ffdda3b277a25a183d5937091e28542cce053050aedc478221ef80d4b99d816d7a77f980b3d5311b59624d3b23fc325218484b888c2ad88bd32f826ea6751b90a8bff0162c28c12bf44208b38a86d686933379fdea61a3e185e6a755813a09de749f7c2a5d368516713c70f98ea94a5b4428bcf179b0949999597dd130e5a4e59cc3afe741b1db96cbf273f6a78baedba093d77664b486802799fd8a5c1899078c71610ba42b25aec626958e6325ef642fd6784631f1d69d91d772b94f14520f4c9047d9b139674a97238b8f49693cb943de5b7b94ed37995d723e96b0aef0559b5fad79820594ecedb940826eae94f66f51c1fa4c4a25e2805aebee3f30a4ab111d053d4532fab4aaa6630f6bd50edeb1a3bb20e6751cb38a5afb11ae5baa77af5c45d11948b1e3c1fbe087ecb33778d3a7bbf2ff5020bf7a992f98ff0b6fe95f8688120688eff4d30b959e64b0b2cdd815aca43f6c17d2aef17175c5847f96f50bba16b9536899093706098132021bd3e01d5429997638fc52ac564e30af335fdf62b299731adfe81a8abef466509e795a2182092ff90c20d7ab2884397db69b4b25cf96b96cc4f73408cb9bc780a839d8290288cc63de79e8f481cfd2e20e4694fbbb046a0059bb06a347ef3512690892cd79eeca28c96e84ea256c4045e4d9d321a769aa6d79bd4fa2627f70b4fe924ddd2f7900e76a908dd951286ad6bbaf77d32bd19128db4eecb3bc2a551def1545c66e67ef90ebcf47bce46fd79328edee1d72ae4b08659d691acf2e91d2841f4b10bfb983fc052d98550012d6e23d9ef08e8a1042857d2ff2456fe0275da1360d5215f9b6d155587b2d3f9e0285b2ab7bd814568974452bd5fa8fae29b13d9c256c58f2f0d58a788a0bbf97129f8c83cd60c1396ab4cf9b398dd0527082c77b9b57fedd620eedff7a7921340ff6f95e69705dbada5bfd4e398b35bf5ac000fa054900313a9ae2ab9e999a05a5a5f547a5f286391de2d50afad2833b1a2e26270386757b9903a9b328d7e43d841abf2ca87a0f3bba50f4bbe28b91a10b1be678b149965bf02a8513baca0e7b0888417ff349714aaebfbd81260c4c8707cf068217ce152da82ecaa2b19602c08c545a7f5d1f7797cf2a280f4ad7065dac90d6f74969a26fe5d465d7cc0fdb7e2ee76de3bcb4a2b54e70e9be6e1ab3beb7dd519f50facad4463515d81bd074a084d26ece3b4aa758f47b7c0bbb8a89149cd13766569cce99634d0ea016f7a8db58915099e1f67591b4e4a7866911f872ce8b73244fc050115a2a2f68bad28cebb269e24e03bd6e77bd66d1e99518dde1e6ddcf1efb1dbfb9c2acfaeebfaf50ba2ee1b51ca42bf263a9d39429b1a81acc07b189d5550a2c2fbf46df37b74120b3ea4d8e0599b62ff88668ebb44de7cc4a8e2284195e3a733f34b681cc571b0fdb1ec1b731ae70e04fc8c521c91c7665d5fba0b219a905d24dbe7d299685a7dc1f6916159b8dd2c27f2df1e9c155f98537e2e56cfd4cd70e41c09898bcf970335693816aba28e0c34ccd6f91a58a3e7f4c232d79bbb0dc3db3acb9016797cf332e85737cc9727ccc6bfd1173f29bc7fac9be63f7a494a9a286f9d03ab3c8affa60a7c5cf2573d94b0991d8da67cae6164aaddca0abba91b0099dba023feb7934cf550c1a73a2c9e0a2a6d75a11ae2ac2b439639fff9029a7255912bf5d16d4a6d067a9793af71f64493e17c8d0e94f5d7a6b6c8dda78fd1ef339345c2e25713f2d6b84354746263396d48ee218b587a3a146a1c9296d888381f76468663d6f1bdc418770fd99bbe55d8b2204bb578cca6a9b1fbbbc7aaeb22aeabb60b052a68c0b7bf0e8680c2f3ee0308388147908e2e64d9f4d1921f34e5b72d7b512993a271942921205674c12b8a2b5447b488b214e627a0a1c03bf4cc36752734c6f88a977c4749d7cf53226ec635a4a2773d4464afd8c059487879a649ac7b435989e98772e18e344c40c4171b121df859adefd96f18ebd088f164930ddf7a0a677965445221bb06d505d570e7a8778605aaf27fc9cb6ab7b6e7dae26d7ccbf65f222cb47969831db3a4772aba0d52e7ad7afe933b1af0fdfd7b5b8d7864cc7efc8821aa61bcbf66fd0fe9ec3d7e0bab5301de40db8deb8851796478db103e7acfb4263560b28efdcd6cc0040e8c95e0d7f1b5102ba00a67c0b4965a7fa8610c46aa846e95c403c5fd87d025bfe8ed5225"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000055100))
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r1, 0x800)
lseek(r1, 0x200, 0x0)
r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r1, r8, 0x0, 0x8400fffffffa)

[  552.149443][T32369] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  552.241929][T32371] loop1: detected capacity change from 0 to 264192
00:09:12 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
creat(&(0x7f0000000080)='./bus\x00', 0xe8ecd7890640dc8a)
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa)

00:09:12 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff080009000000282459801b", 0x39}], 0x1)

00:09:12 executing program 0:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  552.324514][T32375] loop2: detected capacity change from 0 to 264192
[  552.413125][T32377] loop3: detected capacity change from 0 to 264192
[  552.484846][T32381] loop1: detected capacity change from 0 to 264192
00:09:12 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff08000a000000282459801b", 0x39}], 0x1)

00:09:12 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:12 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
creat(&(0x7f0000000080)='./bus\x00', 0xe8ecd7890640dc8a)
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa)

00:09:12 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff08000b000000282459801b", 0x39}], 0x1)

00:09:12 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa) (fail_nth: 1)

[  552.710311][T32387] loop1: detected capacity change from 0 to 264192
00:09:12 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
creat(&(0x7f0000000080)='./bus\x00', 0xe8ecd7890640dc8a)
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  552.777220][T32390] loop4: detected capacity change from 0 to 264192
[  552.917501][T32394] loop3: detected capacity change from 0 to 264192
[  552.936699][T32395] loop1: detected capacity change from 0 to 264192
[  552.948130][T32394] FAULT_INJECTION: forcing a failure.
[  552.948130][T32394] name failslab, interval 1, probability 0, space 0, times 0
[  552.960790][T32394] CPU: 1 PID: 32394 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0
[  552.969200][T32394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  552.979252][T32394] Call Trace:
[  552.982527][T32394]  <TASK>
[  552.985457][T32394]  dump_stack_lvl+0xd6/0x122
[  552.990052][T32394]  dump_stack+0x11/0x1b
[  552.994216][T32394]  should_fail+0x23c/0x250
[  552.998632][T32394]  ? alloc_pipe_info+0xac/0x350
[  553.003481][T32394]  __should_failslab+0x81/0x90
[  553.008328][T32394]  should_failslab+0x5/0x20
[  553.012908][T32394]  kmem_cache_alloc_trace+0x52/0x350
[  553.018219][T32394]  alloc_pipe_info+0xac/0x350
[  553.022919][T32394]  splice_direct_to_actor+0x5f7/0x650
[  553.028286][T32394]  ? security_file_permission+0x7c/0xa0
[  553.033909][T32394]  ? do_splice_direct+0x190/0x190
[  553.038914][T32394]  ? security_file_permission+0x87/0xa0
[  553.044456][T32394]  do_splice_direct+0x106/0x190
[  553.049375][T32394]  do_sendfile+0x675/0xc40
[  553.053850][T32394]  __x64_sys_sendfile64+0x102/0x140
[  553.059105][T32394]  do_syscall_64+0x44/0xa0
[  553.063550][T32394]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  553.069503][T32394] RIP: 0033:0x7fac3ad25ae9
[  553.073892][T32394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  553.093496][T32394] RSP: 002b:00007fac38a9c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  553.101956][T32394] RAX: ffffffffffffffda RBX: 00007fac3ae38f60 RCX: 00007fac3ad25ae9
[  553.109997][T32394] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
00:09:13 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff08000c000000282459801b", 0x39}], 0x1)

00:09:13 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:13 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa) (fail_nth: 2)

00:09:13 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(0x0)
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  553.118041][T32394] RBP: 00007fac38a9c1d0 R08: 0000000000000000 R09: 0000000000000000
[  553.125990][T32394] R10: 00008400fffffffa R11: 0000000000000246 R12: 0000000000000001
[  553.133945][T32394] R13: 00007ffd54033e4f R14: 00007fac38a9c300 R15: 0000000000022000
[  553.141925][T32394]  </TASK>
00:09:13 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
creat(&(0x7f0000000080)='./bus\x00', 0xe8ecd7890640dc8a)
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:13 executing program 0:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:13 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff08000d000000282459801b", 0x39}], 0x1)

[  553.342181][T32401] loop4: detected capacity change from 0 to 264192
[  553.371066][T32403] loop3: detected capacity change from 0 to 264192
[  553.403888][T32406] loop1: detected capacity change from 0 to 264192
[  553.440932][T32403] FAULT_INJECTION: forcing a failure.
[  553.440932][T32403] name failslab, interval 1, probability 0, space 0, times 0
[  553.453596][T32403] CPU: 1 PID: 32403 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0
[  553.462013][T32403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  553.472089][T32403] Call Trace:
[  553.475363][T32403]  <TASK>
[  553.478289][T32403]  dump_stack_lvl+0xd6/0x122
[  553.482905][T32403]  dump_stack+0x11/0x1b
[  553.487055][T32403]  should_fail+0x23c/0x250
[  553.491472][T32403]  ? kcalloc+0x32/0x40
[  553.495565][T32403]  __should_failslab+0x81/0x90
[  553.500330][T32403]  should_failslab+0x5/0x20
[  553.504835][T32403]  __kmalloc+0x6f/0x370
[  553.508998][T32403]  ? kmem_cache_alloc_trace+0x24b/0x350
[  553.514539][T32403]  kcalloc+0x32/0x40
[  553.518433][T32403]  alloc_pipe_info+0x1be/0x350
[  553.523273][T32403]  splice_direct_to_actor+0x5f7/0x650
[  553.528645][T32403]  ? security_file_permission+0x7c/0xa0
[  553.534219][T32403]  ? do_splice_direct+0x190/0x190
[  553.539236][T32403]  ? security_file_permission+0x87/0xa0
[  553.544860][T32403]  do_splice_direct+0x106/0x190
[  553.549716][T32403]  do_sendfile+0x675/0xc40
[  553.554231][T32403]  __x64_sys_sendfile64+0x102/0x140
[  553.559432][T32403]  do_syscall_64+0x44/0xa0
[  553.563870][T32403]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  553.569796][T32403] RIP: 0033:0x7fac3ad25ae9
[  553.574218][T32403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  553.593843][T32403] RSP: 002b:00007fac38a9c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  553.602245][T32403] RAX: ffffffffffffffda RBX: 00007fac3ae38f60 RCX: 00007fac3ad25ae9
[  553.610200][T32403] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
[  553.618205][T32403] RBP: 00007fac38a9c1d0 R08: 0000000000000000 R09: 0000000000000000
[  553.626169][T32403] R10: 00008400fffffffa R11: 0000000000000246 R12: 0000000000000001
[  553.634127][T32403] R13: 00007ffd54033e4f R14: 00007fac38a9c300 R15: 0000000000022000
[  553.642086][T32403]  </TASK>
00:09:13 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:13 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff08000e000000282459801b", 0x39}], 0x1)

[  553.649922][T32410] loop2: detected capacity change from 0 to 264192
00:09:13 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa) (fail_nth: 3)

00:09:13 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
creat(&(0x7f0000000080)='./bus\x00', 0xe8ecd7890640dc8a)
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:13 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff080011000000282459801b", 0x39}], 0x1)

[  553.867118][T32419] loop4: detected capacity change from 0 to 264192
[  553.870903][T32420] loop3: detected capacity change from 0 to 264192
[  553.893676][T32421] loop1: detected capacity change from 0 to 264192
[  553.942782][T32420] FAULT_INJECTION: forcing a failure.
[  553.942782][T32420] name failslab, interval 1, probability 0, space 0, times 0
[  553.955519][T32420] CPU: 1 PID: 32420 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0
[  553.963964][T32420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  553.974163][T32420] Call Trace:
[  553.977441][T32420]  <TASK>
[  553.980372][T32420]  dump_stack_lvl+0xd6/0x122
[  553.984988][T32420]  dump_stack+0x11/0x1b
[  553.989135][T32420]  should_fail+0x23c/0x250
[  553.993550][T32420]  ? kmalloc_array+0x2d/0x40
[  553.998219][T32420]  __should_failslab+0x81/0x90
[  554.002989][T32420]  should_failslab+0x5/0x20
[  554.007574][T32420]  __kmalloc+0x6f/0x370
[  554.011730][T32420]  ? mntput_no_expire+0x69/0x690
[  554.016792][T32420]  ? lockref_put_return+0xed/0x140
[  554.022008][T32420]  kmalloc_array+0x2d/0x40
[  554.026423][T32420]  iter_file_splice_write+0xd5/0x790
[  554.031795][T32420]  ? atime_needs_update+0xda/0x390
[  554.036953][T32420]  ? touch_atime+0x11f/0x2e0
[  554.041637][T32420]  ? generic_file_splice_read+0x2a9/0x330
[  554.047492][T32420]  ? splice_from_pipe+0xd0/0xd0
[  554.052345][T32420]  direct_splice_actor+0x80/0xa0
[  554.057286][T32420]  splice_direct_to_actor+0x345/0x650
[  554.062675][T32420]  ? do_splice_direct+0x190/0x190
[  554.067698][T32420]  do_splice_direct+0x106/0x190
[  554.072577][T32420]  do_sendfile+0x675/0xc40
[  554.076992][T32420]  __x64_sys_sendfile64+0x102/0x140
[  554.082231][T32420]  do_syscall_64+0x44/0xa0
[  554.086733][T32420]  entry_SYSCALL_64_after_hwframe+0x44/0xae
00:09:14 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
creat(&(0x7f0000000080)='./bus\x00', 0xe8ecd7890640dc8a)
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:14 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff080012000000282459801b", 0x39}], 0x1)

00:09:14 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, 0x0)
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  554.092761][T32420] RIP: 0033:0x7fac3ad25ae9
[  554.097171][T32420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  554.116906][T32420] RSP: 002b:00007fac38a9c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  554.125320][T32420] RAX: ffffffffffffffda RBX: 00007fac3ae38f60 RCX: 00007fac3ad25ae9
[  554.133286][T32420] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
[  554.141252][T32420] RBP: 00007fac38a9c1d0 R08: 0000000000000000 R09: 0000000000000000
[  554.149254][T32420] R10: 00008400fffffffa R11: 0000000000000246 R12: 0000000000000001
[  554.157205][T32420] R13: 00007ffd54033e4f R14: 00007fac38a9c300 R15: 0000000000022000
[  554.165156][T32420]  </TASK>
[  554.331319][T32428] loop1: detected capacity change from 0 to 264192
[  554.332080][T32429] loop4: detected capacity change from 0 to 264192
00:09:14 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa) (fail_nth: 4)

00:09:14 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff080002000000282459801b", 0x39}], 0x1)

[  554.533409][T32433] loop3: detected capacity change from 0 to 264192
[  554.577084][T32433] FAULT_INJECTION: forcing a failure.
[  554.577084][T32433] name failslab, interval 1, probability 0, space 0, times 0
[  554.589712][T32433] CPU: 1 PID: 32433 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0
[  554.598106][T32433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  554.608148][T32433] Call Trace:
[  554.611408][T32433]  <TASK>
[  554.614398][T32433]  dump_stack_lvl+0xd6/0x122
[  554.618992][T32433]  dump_stack+0x11/0x1b
[  554.623172][T32433]  should_fail+0x23c/0x250
[  554.627581][T32433]  ? mempool_alloc_slab+0x16/0x20
[  554.632585][T32433]  __should_failslab+0x81/0x90
[  554.637444][T32433]  should_failslab+0x5/0x20
[  554.642027][T32433]  kmem_cache_alloc+0x4f/0x320
[  554.646777][T32433]  mempool_alloc_slab+0x16/0x20
[  554.651791][T32433]  ? mempool_free+0x130/0x130
[  554.656463][T32433]  mempool_alloc+0x9d/0x310
[  554.660945][T32433]  bio_alloc_bioset+0xcc/0x560
[  554.665696][T32433]  ? xas_load+0x284/0x2a0
[  554.670016][T32433]  ? folio_mark_accessed+0x12f/0x380
[  554.675290][T32433]  __mpage_writepage+0x9eb/0x1060
[  554.680295][T32433]  write_cache_pages+0x454/0x7f0
[  554.685294][T32433]  ? mpage_writepages+0x130/0x130
[  554.690300][T32433]  ? fat_block_truncate_page+0x30/0x30
[  554.695814][T32433]  mpage_writepages+0x7f/0x130
[  554.700570][T32433]  ? fat_block_truncate_page+0x30/0x30
[  554.706068][T32433]  ? fat_readpage+0x20/0x20
[  554.710651][T32433]  fat_writepages+0x20/0x30
[  554.715171][T32433]  do_writepages+0x1cb/0x330
[  554.719742][T32433]  ? debug_smp_processor_id+0x18/0x20
[  554.725150][T32433]  filemap_write_and_wait_range+0x1b2/0x340
[  554.731019][T32433]  generic_file_direct_write+0xb4/0x410
[  554.736554][T32433]  ? current_time+0xed/0x1a0
[  554.741143][T32433]  ? file_update_time+0x1b4/0x230
[  554.746167][T32433]  __generic_file_write_iter+0x13d/0x2b0
[  554.751862][T32433]  ? generic_write_checks+0x250/0x290
[  554.757237][T32433]  generic_file_write_iter+0x75/0x130
[  554.762597][T32433]  do_iter_readv_writev+0x2de/0x380
[  554.767782][T32433]  do_iter_write+0x192/0x5c0
[  554.772351][T32433]  ? splice_from_pipe_next+0x34f/0x3b0
[  554.777858][T32433]  ? kmalloc_array+0x2d/0x40
[  554.782448][T32433]  vfs_iter_write+0x4c/0x70
[  554.786930][T32433]  iter_file_splice_write+0x43a/0x790
[  554.792371][T32433]  ? splice_from_pipe+0xd0/0xd0
[  554.797200][T32433]  direct_splice_actor+0x80/0xa0
[  554.802165][T32433]  splice_direct_to_actor+0x345/0x650
[  554.807519][T32433]  ? do_splice_direct+0x190/0x190
[  554.812538][T32433]  do_splice_direct+0x106/0x190
[  554.817385][T32433]  do_sendfile+0x675/0xc40
[  554.821802][T32433]  __x64_sys_sendfile64+0x102/0x140
[  554.826976][T32433]  do_syscall_64+0x44/0xa0
[  554.831371][T32433]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  554.837244][T32433] RIP: 0033:0x7fac3ad25ae9
[  554.841632][T32433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  554.861214][T32433] RSP: 002b:00007fac38a9c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  554.869601][T32433] RAX: ffffffffffffffda RBX: 00007fac3ae38f60 RCX: 00007fac3ad25ae9
00:09:14 executing program 0:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:14 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:14 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
creat(&(0x7f0000000080)='./bus\x00', 0xe8ecd7890640dc8a)
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:14 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff080003000000282459801b", 0x39}], 0x1)

[  554.877547][T32433] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
[  554.885496][T32433] RBP: 00007fac38a9c1d0 R08: 0000000000000000 R09: 0000000000000000
[  554.893450][T32433] R10: 00008400fffffffa R11: 0000000000000246 R12: 0000000000000001
[  554.901482][T32433] R13: 00007ffd54033e4f R14: 00007fac38a9c300 R15: 0000000000022000
[  554.909462][T32433]  </TASK>
00:09:15 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa) (fail_nth: 5)

00:09:15 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
creat(&(0x7f0000000080)='./bus\x00', 0xe8ecd7890640dc8a)
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  555.032173][T32436] loop1: detected capacity change from 0 to 264192
00:09:15 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff080005000000282459801b", 0x39}], 0x1)

00:09:15 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  555.129263][T32439] loop2: detected capacity change from 0 to 264192
00:09:15 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, 0x0)
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  555.199159][T32444] loop3: detected capacity change from 0 to 264192
[  555.214831][T32444] FAULT_INJECTION: forcing a failure.
[  555.214831][T32444] name failslab, interval 1, probability 0, space 0, times 0
[  555.227641][T32444] CPU: 0 PID: 32444 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0
[  555.236088][T32444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  555.246141][T32444] Call Trace:
00:09:15 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff080006000000282459801b", 0x39}], 0x1)

[  555.249420][T32444]  <TASK>
[  555.252349][T32444]  dump_stack_lvl+0xd6/0x122
[  555.256983][T32444]  dump_stack+0x11/0x1b
[  555.261178][T32444]  should_fail+0x23c/0x250
[  555.265580][T32444]  ? mempool_alloc_slab+0x16/0x20
[  555.270614][T32444]  __should_failslab+0x81/0x90
[  555.275446][T32444]  should_failslab+0x5/0x20
[  555.279968][T32444]  kmem_cache_alloc+0x4f/0x320
[  555.283420][T32447] loop1: detected capacity change from 0 to 264192
[  555.284740][T32444]  ? mempool_alloc_slab+0x16/0x20
[  555.284765][T32444]  mempool_alloc_slab+0x16/0x20
[  555.301072][T32444]  ? mempool_free+0x130/0x130
[  555.305895][T32444]  mempool_alloc+0x9d/0x310
[  555.310451][T32444]  bio_alloc_bioset+0x1af/0x560
[  555.315423][T32444]  __mpage_writepage+0x9eb/0x1060
[  555.320440][T32444]  write_cache_pages+0x454/0x7f0
[  555.325363][T32444]  ? mpage_writepages+0x130/0x130
[  555.330375][T32444]  ? fat_block_truncate_page+0x30/0x30
[  555.335889][T32444]  mpage_writepages+0x7f/0x130
[  555.340654][T32444]  ? fat_block_truncate_page+0x30/0x30
[  555.346103][T32444]  ? fat_readpage+0x20/0x20
[  555.350591][T32444]  fat_writepages+0x20/0x30
[  555.355111][T32444]  do_writepages+0x1cb/0x330
[  555.359768][T32444]  filemap_write_and_wait_range+0x1b2/0x340
[  555.365677][T32444]  generic_file_direct_write+0xb4/0x410
[  555.371243][T32444]  ? current_time+0xed/0x1a0
[  555.375856][T32444]  ? file_update_time+0x1b4/0x230
[  555.380876][T32444]  __generic_file_write_iter+0x13d/0x2b0
[  555.386494][T32444]  ? generic_write_checks+0x250/0x290
[  555.391851][T32444]  generic_file_write_iter+0x75/0x130
[  555.397257][T32444]  do_iter_readv_writev+0x2de/0x380
[  555.402439][T32444]  do_iter_write+0x192/0x5c0
[  555.407014][T32444]  ? splice_from_pipe_next+0x34f/0x3b0
[  555.412471][T32444]  ? kmalloc_array+0x2d/0x40
[  555.417046][T32444]  vfs_iter_write+0x4c/0x70
[  555.421532][T32444]  iter_file_splice_write+0x43a/0x790
[  555.426900][T32444]  ? splice_from_pipe+0xd0/0xd0
[  555.431746][T32444]  direct_splice_actor+0x80/0xa0
[  555.436697][T32444]  splice_direct_to_actor+0x345/0x650
[  555.442107][T32444]  ? do_splice_direct+0x190/0x190
[  555.447143][T32444]  do_splice_direct+0x106/0x190
[  555.452037][T32444]  do_sendfile+0x675/0xc40
[  555.456532][T32444]  __x64_sys_sendfile64+0x102/0x140
[  555.461719][T32444]  do_syscall_64+0x44/0xa0
[  555.466228][T32444]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  555.472110][T32444] RIP: 0033:0x7fac3ad25ae9
[  555.476533][T32444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  555.496137][T32444] RSP: 002b:00007fac38a9c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  555.504533][T32444] RAX: ffffffffffffffda RBX: 00007fac3ae38f60 RCX: 00007fac3ad25ae9
[  555.512529][T32444] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
[  555.520495][T32444] RBP: 00007fac38a9c1d0 R08: 0000000000000000 R09: 0000000000000000
[  555.528450][T32444] R10: 00008400fffffffa R11: 0000000000000246 R12: 0000000000000001
[  555.536402][T32444] R13: 00007ffd54033e4f R14: 00007fac38a9c300 R15: 0000000000022000
[  555.544374][T32444]  </TASK>
00:09:15 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
creat(&(0x7f0000000080)='./bus\x00', 0xe8ecd7890640dc8a)
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  555.626767][T32451] validate_nla: 12 callbacks suppressed
[  555.626782][T32451] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  555.658519][T32453] loop4: detected capacity change from 0 to 264192
00:09:15 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff080007000000282459801b", 0x39}], 0x1)

[  555.678038][T32454] loop2: detected capacity change from 0 to 264192
[  555.773075][T32456] loop1: detected capacity change from 0 to 264192
[  555.819258][T32458] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
00:09:16 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
creat(&(0x7f0000000080)='./bus\x00', 0xe8ecd7890640dc8a)
ftruncate(0xffffffffffffffff, 0x800)
lseek(0xffffffffffffffff, 0x200, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0x8400fffffffa)

00:09:16 executing program 0:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:16 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa) (fail_nth: 6)

00:09:16 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:16 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff080008000000282459801b", 0x39}], 0x1)

[  556.069644][T32464] loop3: detected capacity change from 0 to 264192
[  556.069687][T32463] loop2: detected capacity change from 0 to 264192
[  556.083944][T32466] loop1: detected capacity change from 0 to 264192
[  556.093857][T32465] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  556.120648][T32464] FAULT_INJECTION: forcing a failure.
[  556.120648][T32464] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  556.133939][T32464] CPU: 1 PID: 32464 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0
[  556.142355][T32464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  556.152403][T32464] Call Trace:
[  556.155780][T32464]  <TASK>
[  556.158711][T32464]  dump_stack_lvl+0xd6/0x122
[  556.163352][T32464]  dump_stack+0x11/0x1b
[  556.167504][T32464]  should_fail+0x23c/0x250
[  556.171966][T32464]  __alloc_pages+0x102/0x330
[  556.176566][T32464]  alloc_pages+0x382/0x3d0
[  556.180983][T32464]  folio_alloc+0x1a/0x20
[  556.185379][T32464]  filemap_alloc_folio+0x53/0xf0
[  556.190318][T32464]  __filemap_get_folio+0x443/0x690
[  556.195432][T32464]  pagecache_get_page+0x26/0xe0
[  556.200310][T32464]  grab_cache_page_write_begin+0x3f/0x50
[  556.205947][T32464]  cont_write_begin+0x4ab/0x7b0
[  556.210817][T32464]  fat_write_begin+0x61/0xf0
[  556.215418][T32464]  ? fat_block_truncate_page+0x30/0x30
[  556.221003][T32464]  generic_perform_write+0x1c8/0x400
[  556.226379][T32464]  __generic_file_write_iter+0x195/0x2b0
[  556.232021][T32464]  ? generic_write_checks+0x250/0x290
[  556.237456][T32464]  generic_file_write_iter+0x75/0x130
[  556.242839][T32464]  do_iter_readv_writev+0x2de/0x380
[  556.248042][T32464]  do_iter_write+0x192/0x5c0
[  556.252629][T32464]  ? splice_from_pipe_next+0x34f/0x3b0
[  556.258098][T32464]  ? kmalloc_array+0x2d/0x40
[  556.262695][T32464]  vfs_iter_write+0x4c/0x70
[  556.267283][T32464]  iter_file_splice_write+0x43a/0x790
[  556.272745][T32464]  ? splice_from_pipe+0xd0/0xd0
[  556.277610][T32464]  direct_splice_actor+0x80/0xa0
[  556.282614][T32464]  splice_direct_to_actor+0x345/0x650
[  556.288048][T32464]  ? do_splice_direct+0x190/0x190
[  556.293115][T32464]  do_splice_direct+0x106/0x190
[  556.297967][T32464]  do_sendfile+0x675/0xc40
[  556.302389][T32464]  __x64_sys_sendfile64+0x102/0x140
[  556.307624][T32464]  do_syscall_64+0x44/0xa0
[  556.312045][T32464]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  556.318034][T32464] RIP: 0033:0x7fac3ad25ae9
[  556.322454][T32464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  556.342069][T32464] RSP: 002b:00007fac38a9c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  556.350519][T32464] RAX: ffffffffffffffda RBX: 00007fac3ae38f60 RCX: 00007fac3ad25ae9
[  556.358498][T32464] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
[  556.366506][T32464] RBP: 00007fac38a9c1d0 R08: 0000000000000000 R09: 0000000000000000
[  556.374493][T32464] R10: 00008400fffffffa R11: 0000000000000246 R12: 0000000000000001
[  556.382472][T32464] R13: 00007ffd54033e4f R14: 00007fac38a9c300 R15: 0000000000022000
[  556.390448][T32464]  </TASK>
00:09:16 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff080009000000282459801b", 0x39}], 0x1)

00:09:16 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
creat(&(0x7f0000000080)='./bus\x00', 0xe8ecd7890640dc8a)
ftruncate(0xffffffffffffffff, 0x800)
lseek(0xffffffffffffffff, 0x200, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0x8400fffffffa)

00:09:16 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:16 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, 0x0)
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:16 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa) (fail_nth: 7)

00:09:16 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff08000a000000282459801b", 0x39}], 0x1)

[  556.625244][T32475] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  556.680378][T32479] loop2: detected capacity change from 0 to 264192
[  556.703635][T32480] loop1: detected capacity change from 0 to 264192
[  556.713634][T32481] loop3: detected capacity change from 0 to 264192
[  556.744991][T32481] FAULT_INJECTION: forcing a failure.
[  556.744991][T32481] name failslab, interval 1, probability 0, space 0, times 0
[  556.757869][T32481] CPU: 1 PID: 32481 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0
[  556.766286][T32481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  556.776466][T32481] Call Trace:
[  556.779752][T32481]  <TASK>
[  556.782679][T32481]  dump_stack_lvl+0xd6/0x122
[  556.787271][T32481]  dump_stack+0x11/0x1b
[  556.791424][T32481]  should_fail+0x23c/0x250
[  556.795842][T32481]  ? mempool_alloc_slab+0x16/0x20
[  556.800938][T32481]  __should_failslab+0x81/0x90
[  556.805800][T32481]  should_failslab+0x5/0x20
[  556.810308][T32481]  kmem_cache_alloc+0x4f/0x320
[  556.815071][T32481]  mempool_alloc_slab+0x16/0x20
[  556.820048][T32481]  ? mempool_free+0x130/0x130
[  556.824723][T32481]  mempool_alloc+0x9d/0x310
[  556.829246][T32481]  ? fat_bmap+0x258/0x290
[  556.833577][T32481]  bio_alloc_bioset+0xcc/0x560
[  556.838344][T32481]  submit_bh_wbc+0x133/0x320
[  556.842928][T32481]  __block_write_begin_int+0xb13/0x1010
[  556.848534][T32481]  ? fat_block_truncate_page+0x30/0x30
[  556.853998][T32481]  cont_write_begin+0x4cf/0x7b0
[  556.858931][T32481]  fat_write_begin+0x61/0xf0
[  556.863601][T32481]  ? fat_block_truncate_page+0x30/0x30
[  556.869109][T32481]  generic_perform_write+0x1c8/0x400
[  556.874470][T32481]  __generic_file_write_iter+0x195/0x2b0
[  556.880097][T32481]  ? generic_write_checks+0x250/0x290
[  556.885503][T32481]  generic_file_write_iter+0x75/0x130
[  556.890910][T32481]  do_iter_readv_writev+0x2de/0x380
[  556.896111][T32481]  do_iter_write+0x192/0x5c0
[  556.900728][T32481]  ? splice_from_pipe_next+0x34f/0x3b0
[  556.906249][T32481]  ? kmalloc_array+0x2d/0x40
[  556.910897][T32481]  vfs_iter_write+0x4c/0x70
[  556.915400][T32481]  iter_file_splice_write+0x43a/0x790
[  556.920847][T32481]  ? splice_from_pipe+0xd0/0xd0
[  556.925784][T32481]  direct_splice_actor+0x80/0xa0
[  556.930800][T32481]  splice_direct_to_actor+0x345/0x650
[  556.936177][T32481]  ? do_splice_direct+0x190/0x190
[  556.941203][T32481]  do_splice_direct+0x106/0x190
00:09:16 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
creat(&(0x7f0000000080)='./bus\x00', 0xe8ecd7890640dc8a)
ftruncate(0xffffffffffffffff, 0x800)
lseek(0xffffffffffffffff, 0x200, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0x8400fffffffa)

[  556.946050][T32481]  do_sendfile+0x675/0xc40
[  556.950517][T32481]  __x64_sys_sendfile64+0x102/0x140
[  556.955717][T32481]  do_syscall_64+0x44/0xa0
[  556.960119][T32481]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  556.965999][T32481] RIP: 0033:0x7fac3ad25ae9
[  556.970488][T32481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
00:09:17 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  556.990260][T32481] RSP: 002b:00007fac38a9c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  556.998737][T32481] RAX: ffffffffffffffda RBX: 00007fac3ae38f60 RCX: 00007fac3ad25ae9
[  557.006689][T32481] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
[  557.014654][T32481] RBP: 00007fac38a9c1d0 R08: 0000000000000000 R09: 0000000000000000
[  557.022602][T32481] R10: 00008400fffffffa R11: 0000000000000246 R12: 0000000000000001
[  557.030563][T32481] R13: 00007ffd54033e4f R14: 00007fac38a9c300 R15: 0000000000022000
[  557.038519][T32481]  </TASK>
[  557.102732][T32484] loop4: detected capacity change from 0 to 264192
[  557.103972][T32485] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  557.248574][T32488] loop1: detected capacity change from 0 to 264192
[  557.267513][T32489] loop2: detected capacity change from 0 to 264192
00:09:17 executing program 0:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:17 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa) (fail_nth: 8)

00:09:17 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff08000b000000282459801b", 0x39}], 0x1)

00:09:17 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:17 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff08000c000000282459801b", 0x39}], 0x1)

[  557.362796][T32492] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  557.380912][T32493] loop3: detected capacity change from 0 to 264192
[  557.434558][T32493] FAULT_INJECTION: forcing a failure.
[  557.434558][T32493] name failslab, interval 1, probability 0, space 0, times 0
[  557.447500][T32493] CPU: 1 PID: 32493 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0
[  557.455991][T32493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  557.466052][T32493] Call Trace:
[  557.469339][T32493]  <TASK>
[  557.472268][T32493]  dump_stack_lvl+0xd6/0x122
[  557.476956][T32493]  dump_stack+0x11/0x1b
[  557.481115][T32493]  should_fail+0x23c/0x250
[  557.485633][T32493]  ? mempool_alloc_slab+0x16/0x20
[  557.490732][T32493]  __should_failslab+0x81/0x90
[  557.495500][T32493]  should_failslab+0x5/0x20
[  557.500029][T32493]  kmem_cache_alloc+0x4f/0x320
[  557.504817][T32493]  mempool_alloc_slab+0x16/0x20
[  557.509667][T32493]  ? mempool_free+0x130/0x130
[  557.514345][T32493]  mempool_alloc+0x9d/0x310
[  557.518902][T32493]  ? __this_cpu_preempt_check+0x18/0x20
[  557.524447][T32493]  ? __this_cpu_preempt_check+0x18/0x20
[  557.529995][T32493]  bio_alloc_bioset+0xcc/0x560
[  557.534769][T32493]  ? _raw_spin_unlock+0x2e/0x50
[  557.539672][T32493]  __mpage_writepage+0x9eb/0x1060
[  557.544801][T32493]  write_cache_pages+0x454/0x7f0
[  557.549749][T32493]  ? mpage_writepages+0x130/0x130
[  557.554800][T32493]  ? fat_block_truncate_page+0x30/0x30
[  557.560237][T32493]  mpage_writepages+0x7f/0x130
[  557.564981][T32493]  ? fat_block_truncate_page+0x30/0x30
[  557.570489][T32493]  ? fat_readpage+0x20/0x20
[  557.575107][T32493]  fat_writepages+0x20/0x30
[  557.579665][T32493]  do_writepages+0x1cb/0x330
[  557.584253][T32493]  ? generic_perform_write+0x397/0x400
[  557.589740][T32493]  filemap_write_and_wait_range+0x1b2/0x340
[  557.595614][T32493]  __generic_file_write_iter+0x1c5/0x2b0
[  557.601229][T32493]  generic_file_write_iter+0x75/0x130
[  557.606589][T32493]  do_iter_readv_writev+0x2de/0x380
[  557.611787][T32493]  do_iter_write+0x192/0x5c0
[  557.616436][T32493]  ? splice_from_pipe_next+0x34f/0x3b0
[  557.621937][T32493]  ? kmalloc_array+0x2d/0x40
[  557.626565][T32493]  vfs_iter_write+0x4c/0x70
[  557.631146][T32493]  iter_file_splice_write+0x43a/0x790
[  557.636568][T32493]  ? splice_from_pipe+0xd0/0xd0
[  557.641476][T32493]  direct_splice_actor+0x80/0xa0
[  557.646463][T32493]  splice_direct_to_actor+0x345/0x650
[  557.651891][T32493]  ? do_splice_direct+0x190/0x190
[  557.656912][T32493]  do_splice_direct+0x106/0x190
[  557.661837][T32493]  do_sendfile+0x675/0xc40
[  557.666246][T32493]  __x64_sys_sendfile64+0x102/0x140
[  557.671467][T32493]  do_syscall_64+0x44/0xa0
[  557.675888][T32493]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  557.681917][T32493] RIP: 0033:0x7fac3ad25ae9
[  557.686312][T32493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  557.706001][T32493] RSP: 002b:00007fac38a9c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  557.714411][T32493] RAX: ffffffffffffffda RBX: 00007fac3ae38f60 RCX: 00007fac3ad25ae9
[  557.722363][T32493] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
00:09:17 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  557.730334][T32493] RBP: 00007fac38a9c1d0 R08: 0000000000000000 R09: 0000000000000000
[  557.738296][T32493] R10: 00008400fffffffa R11: 0000000000000246 R12: 0000000000000001
[  557.746476][T32493] R13: 00007ffd54033e4f R14: 00007fac38a9c300 R15: 0000000000022000
[  557.754442][T32493]  </TASK>
00:09:17 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa) (fail_nth: 9)

[  557.799916][T32495] loop1: detected capacity change from 0 to 264192
00:09:18 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:18 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff08000d000000282459801b", 0x39}], 0x1)

00:09:18 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(0x0)
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  557.941785][T32499] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  558.001812][T32501] loop2: detected capacity change from 0 to 264192
[  558.067290][T32503] loop3: detected capacity change from 0 to 264192
[  558.096924][T32503] FAULT_INJECTION: forcing a failure.
[  558.096924][T32503] name failslab, interval 1, probability 0, space 0, times 0
[  558.109599][T32503] CPU: 1 PID: 32503 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0
[  558.118013][T32503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  558.128064][T32503] Call Trace:
[  558.131345][T32503]  <TASK>
[  558.134269][T32503]  dump_stack_lvl+0xd6/0x122
[  558.138966][T32503]  dump_stack+0x11/0x1b
[  558.143117][T32503]  should_fail+0x23c/0x250
[  558.147616][T32503]  ? mempool_alloc_slab+0x16/0x20
[  558.152643][T32503]  __should_failslab+0x81/0x90
[  558.157411][T32503]  should_failslab+0x5/0x20
[  558.162049][T32503]  kmem_cache_alloc+0x4f/0x320
[  558.166816][T32503]  ? mempool_alloc_slab+0x16/0x20
[  558.171844][T32503]  mempool_alloc_slab+0x16/0x20
[  558.176720][T32503]  ? mempool_free+0x130/0x130
[  558.181394][T32503]  mempool_alloc+0x9d/0x310
[  558.185898][T32503]  ? __rcu_read_unlock+0x5c/0x290
[  558.190962][T32503]  bio_alloc_bioset+0x1af/0x560
[  558.195895][T32503]  __mpage_writepage+0x9eb/0x1060
[  558.200928][T32503]  write_cache_pages+0x454/0x7f0
[  558.206163][T32503]  ? mpage_writepages+0x130/0x130
[  558.211189][T32503]  ? fat_block_truncate_page+0x30/0x30
[  558.216679][T32503]  mpage_writepages+0x7f/0x130
[  558.221483][T32503]  ? fat_block_truncate_page+0x30/0x30
[  558.226946][T32503]  ? fat_readpage+0x20/0x20
[  558.231476][T32503]  fat_writepages+0x20/0x30
[  558.236040][T32503]  do_writepages+0x1cb/0x330
[  558.240633][T32503]  ? generic_perform_write+0x397/0x400
[  558.246210][T32503]  filemap_write_and_wait_range+0x1b2/0x340
[  558.252143][T32503]  __generic_file_write_iter+0x1c5/0x2b0
[  558.257772][T32503]  generic_file_write_iter+0x75/0x130
[  558.263232][T32503]  do_iter_readv_writev+0x2de/0x380
[  558.268495][T32503]  do_iter_write+0x192/0x5c0
[  558.273149][T32503]  ? splice_from_pipe_next+0x34f/0x3b0
[  558.278637][T32503]  ? kmalloc_array+0x2d/0x40
[  558.283208][T32503]  vfs_iter_write+0x4c/0x70
[  558.287691][T32503]  iter_file_splice_write+0x43a/0x790
[  558.293057][T32503]  ? splice_from_pipe+0xd0/0xd0
[  558.297974][T32503]  direct_splice_actor+0x80/0xa0
[  558.303015][T32503]  splice_direct_to_actor+0x345/0x650
[  558.308388][T32503]  ? do_splice_direct+0x190/0x190
[  558.313397][T32503]  do_splice_direct+0x106/0x190
[  558.318246][T32503]  do_sendfile+0x675/0xc40
[  558.322641][T32503]  __x64_sys_sendfile64+0x102/0x140
[  558.327820][T32503]  do_syscall_64+0x44/0xa0
[  558.332223][T32503]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  558.338099][T32503] RIP: 0033:0x7fac3ad25ae9
[  558.342507][T32503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  558.362134][T32503] RSP: 002b:00007fac38a9c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  558.370522][T32503] RAX: ffffffffffffffda RBX: 00007fac3ae38f60 RCX: 00007fac3ad25ae9
[  558.378493][T32503] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
[  558.386443][T32503] RBP: 00007fac38a9c1d0 R08: 0000000000000000 R09: 0000000000000000
[  558.394469][T32503] R10: 00008400fffffffa R11: 0000000000000246 R12: 0000000000000001
[  558.402500][T32503] R13: 00007ffd54033e4f R14: 00007fac38a9c300 R15: 0000000000022000
[  558.410450][T32503]  </TASK>
00:09:18 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff08000e000000282459801b", 0x39}], 0x1)

00:09:18 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  558.419375][T32505] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  558.545968][T32508] loop1: detected capacity change from 0 to 264192
[  558.597069][T32509] loop4: detected capacity change from 0 to 264192
[  558.654381][T32511] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
00:09:18 executing program 0:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:18 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa) (fail_nth: 10)

00:09:18 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff080010000000282459801b", 0x39}], 0x1)

[  558.724424][T32513] loop2: detected capacity change from 0 to 264192
[  558.807211][T32516] loop3: detected capacity change from 0 to 264192
[  558.814265][T32517] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  558.838529][T32516] FAULT_INJECTION: forcing a failure.
[  558.838529][T32516] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  558.851852][T32516] CPU: 0 PID: 32516 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0
[  558.860500][T32516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  558.870548][T32516] Call Trace:
[  558.873824][T32516]  <TASK>
[  558.876815][T32516]  dump_stack_lvl+0xd6/0x122
[  558.881439][T32516]  dump_stack+0x11/0x1b
[  558.885588][T32516]  should_fail+0x23c/0x250
[  558.890042][T32516]  __alloc_pages+0x102/0x330
[  558.894635][T32516]  alloc_pages+0x382/0x3d0
[  558.899131][T32516]  folio_alloc+0x1a/0x20
[  558.903414][T32516]  filemap_alloc_folio+0x53/0xf0
[  558.908391][T32516]  page_cache_ra_unbounded+0x1c0/0x430
[  558.913922][T32516]  ondemand_readahead+0x4f8/0x700
[  558.918996][T32516]  page_cache_sync_ra+0xaf/0xe0
[  558.923851][T32516]  filemap_read+0x3eb/0x16d0
[  558.928510][T32516]  ? __rcu_read_unlock+0x5c/0x290
[  558.933535][T32516]  generic_file_read_iter+0x72/0x2a0
[  558.938886][T32516]  ? iov_iter_pipe+0x100/0x150
[  558.943658][T32516]  generic_file_splice_read+0x24f/0x330
[  558.949209][T32516]  ? splice_shrink_spd+0x60/0x60
[  558.954147][T32516]  splice_direct_to_actor+0x2aa/0x650
[  558.959523][T32516]  ? do_splice_direct+0x190/0x190
[  558.964630][T32516]  do_splice_direct+0x106/0x190
[  558.969484][T32516]  do_sendfile+0x675/0xc40
[  558.973919][T32516]  __x64_sys_sendfile64+0x102/0x140
[  558.979116][T32516]  do_syscall_64+0x44/0xa0
[  558.983543][T32516]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  558.989570][T32516] RIP: 0033:0x7fac3ad25ae9
[  558.994036][T32516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  559.013670][T32516] RSP: 002b:00007fac38a9c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  559.022086][T32516] RAX: ffffffffffffffda RBX: 00007fac3ae38f60 RCX: 00007fac3ad25ae9
[  559.030055][T32516] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
[  559.038024][T32516] RBP: 00007fac38a9c1d0 R08: 0000000000000000 R09: 0000000000000000
[  559.045994][T32516] R10: 00008400fffffffa R11: 0000000000000246 R12: 0000000000000002
00:09:18 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff080011000000282459801b", 0x39}], 0x1)

[  559.053966][T32516] R13: 00007ffd54033e4f R14: 00007fac38a9c300 R15: 0000000000022000
[  559.061938][T32516]  </TASK>
00:09:19 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff080012000000282459801b", 0x39}], 0x1)

00:09:19 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa) (fail_nth: 11)

00:09:19 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:19 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:19 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff080000430000282459801b", 0x39}], 0x1)

[  559.361753][T32526] loop2: detected capacity change from 0 to 264192
[  559.362209][T32527] loop3: detected capacity change from 0 to 264192
[  559.419666][T32527] FAULT_INJECTION: forcing a failure.
[  559.419666][T32527] name failslab, interval 1, probability 0, space 0, times 0
[  559.432319][T32527] CPU: 0 PID: 32527 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0
[  559.440731][T32527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  559.450782][T32527] Call Trace:
[  559.454088][T32527]  <TASK>
[  559.457022][T32527]  dump_stack_lvl+0xd6/0x122
[  559.461610][T32527]  dump_stack+0x11/0x1b
[  559.465761][T32527]  should_fail+0x23c/0x250
[  559.470209][T32527]  ? mempool_alloc_slab+0x16/0x20
[  559.475335][T32527]  __should_failslab+0x81/0x90
[  559.480108][T32527]  should_failslab+0x5/0x20
[  559.484617][T32527]  kmem_cache_alloc+0x4f/0x320
[  559.489387][T32527]  mempool_alloc_slab+0x16/0x20
[  559.494290][T32527]  ? mempool_free+0x130/0x130
[  559.498973][T32527]  mempool_alloc+0x9d/0x310
[  559.503479][T32527]  ? fat_get_block+0x317/0x610
[  559.508260][T32527]  bio_alloc_bioset+0xcc/0x560
[  559.513543][T32527]  do_mpage_readpage+0xc4a/0x1040
[  559.518572][T32527]  ? xa_load+0x259/0x270
[  559.522813][T32527]  mpage_readahead+0x188/0x2c0
[  559.527582][T32527]  ? fat_block_truncate_page+0x30/0x30
[  559.533045][T32527]  fat_readahead+0x18/0x20
[  559.537464][T32527]  read_pages+0xba/0x5f0
[  559.541711][T32527]  page_cache_ra_unbounded+0x3d2/0x430
[  559.547210][T32527]  ondemand_readahead+0x4f8/0x700
[  559.552365][T32527]  page_cache_sync_ra+0xaf/0xe0
[  559.557222][T32527]  filemap_read+0x3eb/0x16d0
[  559.561809][T32527]  ? __rcu_read_unlock+0x5c/0x290
[  559.566936][T32527]  generic_file_read_iter+0x72/0x2a0
[  559.572291][T32527]  ? iov_iter_pipe+0x100/0x150
[  559.577100][T32527]  generic_file_splice_read+0x24f/0x330
[  559.582801][T32527]  ? splice_shrink_spd+0x60/0x60
[  559.587870][T32527]  splice_direct_to_actor+0x2aa/0x650
[  559.593251][T32527]  ? do_splice_direct+0x190/0x190
[  559.598277][T32527]  do_splice_direct+0x106/0x190
[  559.603247][T32527]  do_sendfile+0x675/0xc40
[  559.607671][T32527]  __x64_sys_sendfile64+0x102/0x140
[  559.612991][T32527]  do_syscall_64+0x44/0xa0
[  559.617414][T32527]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  559.623317][T32527] RIP: 0033:0x7fac3ad25ae9
[  559.627727][T32527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  559.647330][T32527] RSP: 002b:00007fac38a9c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  559.655895][T32527] RAX: ffffffffffffffda RBX: 00007fac3ae38f60 RCX: 00007fac3ad25ae9
00:09:19 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(0x0)
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:19 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff0800005c0000282459801b", 0x39}], 0x1)

[  559.663874][T32527] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
[  559.671882][T32527] RBP: 00007fac38a9c1d0 R08: 0000000000000000 R09: 0000000000000000
[  559.679851][T32527] R10: 00008400fffffffa R11: 0000000000000246 R12: 0000000000000002
[  559.687824][T32527] R13: 00007ffd54033e4f R14: 00007fac38a9c300 R15: 0000000000022000
[  559.695798][T32527]  </TASK>
00:09:19 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa) (fail_nth: 12)

[  559.868784][T32634] loop1: detected capacity change from 0 to 264192
[  559.875718][T32635] loop4: detected capacity change from 0 to 264192
00:09:19 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff080004020000282459801b", 0x39}], 0x1)

00:09:19 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:19 executing program 0:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:20 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff080004030000282459801b", 0x39}], 0x1)

[  560.017597][T32640] loop3: detected capacity change from 0 to 264192
[  560.036895][T32640] FAULT_INJECTION: forcing a failure.
[  560.036895][T32640] name failslab, interval 1, probability 0, space 0, times 0
[  560.049683][T32640] CPU: 1 PID: 32640 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0
[  560.058125][T32640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  560.068178][T32640] Call Trace:
[  560.071448][T32640]  <TASK>
[  560.074357][T32640]  dump_stack_lvl+0xd6/0x122
[  560.078986][T32640]  dump_stack+0x11/0x1b
[  560.083120][T32640]  should_fail+0x23c/0x250
[  560.087518][T32640]  ? kmalloc_array+0x2d/0x40
[  560.092153][T32640]  __should_failslab+0x81/0x90
[  560.097360][T32640]  should_failslab+0x5/0x20
[  560.101922][T32640]  __kmalloc+0x6f/0x370
[  560.106119][T32640]  kmalloc_array+0x2d/0x40
[  560.110587][T32640]  iter_file_splice_write+0xd5/0x790
[  560.115869][T32640]  ? atime_needs_update+0xda/0x390
[  560.121038][T32640]  ? touch_atime+0x11f/0x2e0
[  560.125624][T32640]  ? generic_file_splice_read+0x2a9/0x330
[  560.131320][T32640]  ? splice_from_pipe+0xd0/0xd0
[  560.136228][T32640]  direct_splice_actor+0x80/0xa0
[  560.141272][T32640]  splice_direct_to_actor+0x345/0x650
[  560.146656][T32640]  ? do_splice_direct+0x190/0x190
[  560.151704][T32640]  do_splice_direct+0x106/0x190
[  560.156545][T32640]  do_sendfile+0x675/0xc40
[  560.160957][T32640]  __x64_sys_sendfile64+0x102/0x140
[  560.166136][T32640]  do_syscall_64+0x44/0xa0
[  560.170553][T32640]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  560.176471][T32640] RIP: 0033:0x7fac3ad25ae9
[  560.180961][T32640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  560.200543][T32640] RSP: 002b:00007fac38a9c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  560.208970][T32640] RAX: ffffffffffffffda RBX: 00007fac3ae38f60 RCX: 00007fac3ad25ae9
00:09:20 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa) (fail_nth: 13)

[  560.216923][T32640] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
[  560.224879][T32640] RBP: 00007fac38a9c1d0 R08: 0000000000000000 R09: 0000000000000000
[  560.232866][T32640] R10: 00008400fffffffa R11: 0000000000000246 R12: 0000000000000002
[  560.240969][T32640] R13: 00007ffd54033e4f R14: 00007fac38a9c300 R15: 0000000000022000
[  560.248922][T32640]  </TASK>
[  560.254508][T32641] loop2: detected capacity change from 0 to 264192
00:09:20 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff080004040000282459801b", 0x39}], 0x1)

00:09:20 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  560.500386][T32647] loop3: detected capacity change from 0 to 264192
[  560.538148][T32647] FAULT_INJECTION: forcing a failure.
[  560.538148][T32647] name failslab, interval 1, probability 0, space 0, times 0
[  560.550867][T32647] CPU: 0 PID: 32647 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0
[  560.559293][T32647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  560.569346][T32647] Call Trace:
[  560.572642][T32647]  <TASK>
[  560.575586][T32647]  dump_stack_lvl+0xd6/0x122
[  560.580292][T32647]  dump_stack+0x11/0x1b
[  560.584517][T32647]  should_fail+0x23c/0x250
[  560.588939][T32647]  ? __blockdev_direct_IO+0x145/0x2420
[  560.594447][T32647]  __should_failslab+0x81/0x90
[  560.599214][T32647]  should_failslab+0x5/0x20
[  560.603717][T32647]  kmem_cache_alloc+0x4f/0x320
[  560.608503][T32647]  __blockdev_direct_IO+0x145/0x2420
[  560.613790][T32647]  ? debug_smp_processor_id+0x18/0x20
[  560.619167][T32647]  ? free_unref_page_list+0x1f3/0x230
[  560.624538][T32647]  ? fat_block_truncate_page+0x30/0x30
[  560.630009][T32647]  ? find_get_entries+0x2d1/0x300
[  560.635123][T32647]  ? invalidate_inode_pages2_range+0x73e/0x790
[  560.641278][T32647]  fat_direct_IO+0x111/0x1e0
[  560.645989][T32647]  generic_file_direct_write+0x27c/0x410
[  560.651700][T32647]  ? file_update_time+0x1b4/0x230
[  560.656728][T32647]  __generic_file_write_iter+0x13d/0x2b0
[  560.662361][T32647]  ? generic_write_checks+0x250/0x290
[  560.667733][T32647]  generic_file_write_iter+0x75/0x130
[  560.673174][T32647]  do_iter_readv_writev+0x2de/0x380
[  560.678381][T32647]  do_iter_write+0x192/0x5c0
[  560.682969][T32647]  ? splice_from_pipe_next+0x34f/0x3b0
[  560.688457][T32647]  ? kmalloc_array+0x2d/0x40
[  560.693047][T32647]  vfs_iter_write+0x4c/0x70
00:09:20 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:20 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff080004050000282459801b", 0x39}], 0x1)

[  560.697552][T32647]  iter_file_splice_write+0x43a/0x790
[  560.702976][T32647]  ? splice_from_pipe+0xd0/0xd0
[  560.707833][T32647]  direct_splice_actor+0x80/0xa0
[  560.712854][T32647]  splice_direct_to_actor+0x345/0x650
[  560.718270][T32647]  ? do_splice_direct+0x190/0x190
[  560.723341][T32647]  do_splice_direct+0x106/0x190
[  560.728217][T32647]  do_sendfile+0x675/0xc40
[  560.732732][T32647]  __x64_sys_sendfile64+0x102/0x140
[  560.737989][T32647]  do_syscall_64+0x44/0xa0
[  560.742454][T32647]  entry_SYSCALL_64_after_hwframe+0x44/0xae
00:09:20 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(0x0)
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  560.748370][T32647] RIP: 0033:0x7fac3ad25ae9
[  560.752778][T32647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  560.772412][T32647] RSP: 002b:00007fac38a9c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  560.776776][T32651] validate_nla: 6 callbacks suppressed
[  560.776790][T32651] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
00:09:20 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff080004060000282459801b", 0x39}], 0x1)

00:09:20 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa) (fail_nth: 14)

[  560.780808][T32647] RAX: ffffffffffffffda RBX: 00007fac3ae38f60 RCX: 00007fac3ad25ae9
[  560.780825][T32647] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
[  560.780837][T32647] RBP: 00007fac38a9c1d0 R08: 0000000000000000 R09: 0000000000000000
[  560.780853][T32647] R10: 00008400fffffffa R11: 0000000000000246 R12: 0000000000000002
[  560.826276][T32647] R13: 00007ffd54033e4f R14: 00007fac38a9c300 R15: 0000000000022000
[  560.834236][T32647]  </TASK>
00:09:20 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff080004070000282459801b", 0x39}], 0x1)

[  560.887077][T32653] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  560.934749][T32655] loop2: detected capacity change from 0 to 264192
00:09:21 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff080004080000282459801b", 0x39}], 0x1)

[  561.035121][T32660] loop4: detected capacity change from 0 to 264192
[  561.042505][T32661] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  561.054882][T32662] loop1: detected capacity change from 0 to 264192
[  561.062315][T32663] loop3: detected capacity change from 0 to 264192
[  561.071882][T32661] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  561.144260][T32663] FAULT_INJECTION: forcing a failure.
[  561.144260][T32663] name failslab, interval 1, probability 0, space 0, times 0
[  561.156917][T32663] CPU: 0 PID: 32663 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0
[  561.165331][T32663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  561.175384][T32663] Call Trace:
[  561.178655][T32663]  <TASK>
[  561.181575][T32663]  dump_stack_lvl+0xd6/0x122
[  561.186207][T32663]  dump_stack+0x11/0x1b
[  561.190413][T32663]  should_fail+0x23c/0x250
[  561.194831][T32663]  ? mempool_alloc_slab+0x16/0x20
[  561.199917][T32663]  __should_failslab+0x81/0x90
[  561.204688][T32663]  should_failslab+0x5/0x20
[  561.209277][T32663]  kmem_cache_alloc+0x4f/0x320
[  561.214078][T32663]  mempool_alloc_slab+0x16/0x20
[  561.218931][T32663]  ? mempool_free+0x130/0x130
[  561.223607][T32663]  mempool_alloc+0x9d/0x310
[  561.228113][T32663]  bio_alloc_bioset+0xcc/0x560
[  561.232881][T32663]  dio_new_bio+0x389/0x4f0
[  561.237299][T32665] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  561.237363][T32663]  ? should_fail+0xd6/0x250
[  561.249978][T32663]  dio_send_cur_page+0x273/0x700
[  561.255048][T32663]  __blockdev_direct_IO+0x1a4d/0x2420
[  561.260455][T32663]  ? fat_block_truncate_page+0x30/0x30
[  561.265933][T32663]  fat_direct_IO+0x111/0x1e0
[  561.270531][T32663]  generic_file_direct_write+0x27c/0x410
[  561.276161][T32663]  ? file_update_time+0x1b4/0x230
[  561.281277][T32663]  __generic_file_write_iter+0x13d/0x2b0
[  561.286911][T32663]  ? generic_write_checks+0x250/0x290
00:09:21 executing program 0:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:21 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:21 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff080004090000282459801b", 0x39}], 0x1)

[  561.292286][T32663]  generic_file_write_iter+0x75/0x130
[  561.297694][T32663]  do_iter_readv_writev+0x2de/0x380
[  561.302951][T32663]  do_iter_write+0x192/0x5c0
[  561.307543][T32663]  ? splice_from_pipe_next+0x34f/0x3b0
[  561.313023][T32663]  ? kmalloc_array+0x2d/0x40
[  561.317614][T32663]  vfs_iter_write+0x4c/0x70
[  561.322115][T32663]  iter_file_splice_write+0x43a/0x790
[  561.327557][T32663]  ? splice_from_pipe+0xd0/0xd0
[  561.332407][T32663]  direct_splice_actor+0x80/0xa0
[  561.337549][T32663]  splice_direct_to_actor+0x345/0x650
[  561.343112][T32663]  ? do_splice_direct+0x190/0x190
[  561.348206][T32663]  do_splice_direct+0x106/0x190
[  561.353156][T32663]  do_sendfile+0x675/0xc40
[  561.357745][T32663]  __x64_sys_sendfile64+0x102/0x140
[  561.362955][T32663]  do_syscall_64+0x44/0xa0
[  561.364715][T32667] loop2: detected capacity change from 0 to 264192
[  561.367366][T32663]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  561.379750][T32663] RIP: 0033:0x7fac3ad25ae9
[  561.384166][T32663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  561.403785][T32663] RSP: 002b:00007fac38a9c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  561.412204][T32663] RAX: ffffffffffffffda RBX: 00007fac3ae38f60 RCX: 00007fac3ad25ae9
[  561.420175][T32663] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
[  561.428225][T32663] RBP: 00007fac38a9c1d0 R08: 0000000000000000 R09: 0000000000000000
[  561.436194][T32663] R10: 00008400fffffffa R11: 0000000000000246 R12: 0000000000000002
[  561.444262][T32663] R13: 00007ffd54033e4f R14: 00007fac38a9c300 R15: 0000000000022000
[  561.452302][T32663]  </TASK>
00:09:21 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff0800040a0000282459801b", 0x39}], 0x1)

[  561.511840][T32670] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
00:09:21 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa) (fail_nth: 15)

[  561.619827][T32673] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  561.763493][T32675] loop3: detected capacity change from 0 to 264192
[  561.798382][T32675] FAULT_INJECTION: forcing a failure.
[  561.798382][T32675] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  561.811635][T32675] CPU: 0 PID: 32675 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0
[  561.820067][T32675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  561.830133][T32675] Call Trace:
[  561.833410][T32675]  <TASK>
[  561.836336][T32675]  dump_stack_lvl+0xd6/0x122
[  561.840936][T32675]  dump_stack+0x11/0x1b
[  561.845143][T32675]  should_fail+0x23c/0x250
[  561.849569][T32675]  __alloc_pages+0x102/0x330
[  561.854164][T32675]  alloc_pages+0x382/0x3d0
[  561.858625][T32675]  folio_alloc+0x1a/0x20
[  561.862899][T32675]  filemap_alloc_folio+0x53/0xf0
[  561.867839][T32675]  page_cache_ra_unbounded+0x1c0/0x430
[  561.873315][T32675]  ondemand_readahead+0x4f8/0x700
[  561.878596][T32675]  page_cache_sync_ra+0xaf/0xe0
[  561.883546][T32675]  filemap_read+0x3eb/0x16d0
[  561.888176][T32675]  ? __rcu_read_unlock+0x5c/0x290
[  561.893207][T32675]  generic_file_read_iter+0x72/0x2a0
[  561.898549][T32675]  ? iov_iter_pipe+0x100/0x150
[  561.903318][T32675]  generic_file_splice_read+0x24f/0x330
[  561.908902][T32675]  ? splice_shrink_spd+0x60/0x60
00:09:21 executing program 1:
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:21 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff0800040b0000282459801b", 0x39}], 0x1)

00:09:21 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:21 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  561.913970][T32675]  splice_direct_to_actor+0x2aa/0x650
[  561.919389][T32675]  ? do_splice_direct+0x190/0x190
[  561.924461][T32675]  do_splice_direct+0x106/0x190
[  561.929319][T32675]  do_sendfile+0x675/0xc40
[  561.933791][T32675]  __x64_sys_sendfile64+0x102/0x140
[  561.939003][T32675]  do_syscall_64+0x44/0xa0
[  561.943422][T32675]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  561.949306][T32675] RIP: 0033:0x7fac3ad25ae9
[  561.953711][T32675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  561.963363][T32678] loop2: detected capacity change from 0 to 264192
[  561.973377][T32675] RSP: 002b:00007fac38a9c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  561.973401][T32675] RAX: ffffffffffffffda RBX: 00007fac3ae38f60 RCX: 00007fac3ad25ae9
[  561.973412][T32675] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
[  562.004218][T32675] RBP: 00007fac38a9c1d0 R08: 0000000000000000 R09: 0000000000000000
[  562.012260][T32675] R10: 00008400fffffffa R11: 0000000000000246 R12: 0000000000000002
[  562.014721][T32679] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  562.020256][T32675] R13: 00007ffd54033e4f R14: 00007fac38a9c300 R15: 0000000000022000
[  562.020275][T32675]  </TASK>
00:09:22 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff0800040c0000282459801b", 0x39}], 0x1)

00:09:22 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa) (fail_nth: 16)

00:09:22 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  562.186142][T32682] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  562.244297][T32686] loop4: detected capacity change from 0 to 264192
[  562.273073][T32687] loop3: detected capacity change from 0 to 264192
[  562.311980][T32687] FAULT_INJECTION: forcing a failure.
[  562.311980][T32687] name failslab, interval 1, probability 0, space 0, times 0
[  562.324638][T32687] CPU: 0 PID: 32687 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0
[  562.333142][T32687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  562.343222][T32687] Call Trace:
[  562.346532][T32687]  <TASK>
[  562.349474][T32687]  dump_stack_lvl+0xd6/0x122
[  562.354125][T32687]  dump_stack+0x11/0x1b
00:09:22 executing program 0:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:22 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff0800040d0000282459801b", 0x39}], 0x1)

00:09:22 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  562.358280][T32687]  should_fail+0x23c/0x250
[  562.362705][T32687]  ? mempool_alloc_slab+0x16/0x20
[  562.367970][T32687]  __should_failslab+0x81/0x90
[  562.372754][T32687]  should_failslab+0x5/0x20
[  562.377327][T32687]  kmem_cache_alloc+0x4f/0x320
[  562.382090][T32687]  mempool_alloc_slab+0x16/0x20
[  562.383108][T32689] loop2: detected capacity change from 0 to 264192
[  562.386951][T32687]  ? mempool_free+0x130/0x130
[  562.386975][T32687]  mempool_alloc+0x9d/0x310
[  562.402640][T32687]  ? fat_get_block+0x317/0x610
[  562.407465][T32687]  bio_alloc_bioset+0xcc/0x560
[  562.412233][T32687]  do_mpage_readpage+0xc4a/0x1040
[  562.417259][T32687]  ? xa_load+0x259/0x270
[  562.421533][T32687]  mpage_readahead+0x188/0x2c0
[  562.426295][T32687]  ? fat_block_truncate_page+0x30/0x30
[  562.431775][T32687]  fat_readahead+0x18/0x20
[  562.436276][T32687]  read_pages+0xba/0x5f0
[  562.440515][T32687]  page_cache_ra_unbounded+0x3d2/0x430
[  562.445988][T32687]  ondemand_readahead+0x4f8/0x700
[  562.451114][T32687]  page_cache_sync_ra+0xaf/0xe0
[  562.456011][T32687]  filemap_read+0x3eb/0x16d0
[  562.460585][T32687]  ? __rcu_read_unlock+0x5c/0x290
[  562.465690][T32687]  generic_file_read_iter+0x72/0x2a0
[  562.470989][T32687]  ? iov_iter_pipe+0x100/0x150
[  562.475761][T32687]  generic_file_splice_read+0x24f/0x330
[  562.481342][T32687]  ? splice_shrink_spd+0x60/0x60
[  562.486281][T32687]  splice_direct_to_actor+0x2aa/0x650
[  562.491642][T32687]  ? do_splice_direct+0x190/0x190
[  562.496770][T32687]  do_splice_direct+0x106/0x190
[  562.501618][T32687]  do_sendfile+0x675/0xc40
[  562.506088][T32687]  __x64_sys_sendfile64+0x102/0x140
[  562.511366][T32687]  do_syscall_64+0x44/0xa0
[  562.515770][T32687]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  562.521649][T32687] RIP: 0033:0x7fac3ad25ae9
[  562.526046][T32687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  562.545632][T32687] RSP: 002b:00007fac38a9c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  562.554027][T32687] RAX: ffffffffffffffda RBX: 00007fac3ae38f60 RCX: 00007fac3ad25ae9
[  562.561979][T32687] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
[  562.569931][T32687] RBP: 00007fac38a9c1d0 R08: 0000000000000000 R09: 0000000000000000
[  562.577885][T32687] R10: 00008400fffffffa R11: 0000000000000246 R12: 0000000000000002
[  562.585839][T32687] R13: 00007ffd54033e4f R14: 00007fac38a9c300 R15: 0000000000022000
[  562.593820][T32687]  </TASK>
00:09:22 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff0800040e0000282459801b", 0x39}], 0x1)

00:09:22 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa) (fail_nth: 17)

[  562.626376][T32692] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  562.717811][T32696] loop4: detected capacity change from 0 to 264192
[  562.864190][T32700] loop3: detected capacity change from 0 to 264192
[  562.903483][T32700] FAULT_INJECTION: forcing a failure.
[  562.903483][T32700] name failslab, interval 1, probability 0, space 0, times 0
[  562.916210][T32700] CPU: 0 PID: 32700 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0
[  562.924634][T32700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  562.934767][T32700] Call Trace:
[  562.938035][T32700]  <TASK>
[  562.940960][T32700]  dump_stack_lvl+0xd6/0x122
[  562.945546][T32700]  dump_stack+0x11/0x1b
[  562.949770][T32700]  should_fail+0x23c/0x250
[  562.954193][T32700]  ? kmalloc_array+0x2d/0x40
[  562.958797][T32700]  __should_failslab+0x81/0x90
[  562.963644][T32700]  should_failslab+0x5/0x20
[  562.968153][T32700]  __kmalloc+0x6f/0x370
[  562.972359][T32700]  kmalloc_array+0x2d/0x40
[  562.976838][T32700]  iter_file_splice_write+0xd5/0x790
[  562.982128][T32700]  ? atime_needs_update+0xda/0x390
[  562.987342][T32700]  ? touch_atime+0x11f/0x2e0
[  562.991983][T32700]  ? generic_file_splice_read+0x2a9/0x330
[  562.997704][T32700]  ? splice_from_pipe+0xd0/0xd0
[  563.002551][T32700]  direct_splice_actor+0x80/0xa0
[  563.007537][T32700]  splice_direct_to_actor+0x345/0x650
[  563.012979][T32700]  ? do_splice_direct+0x190/0x190
[  563.018004][T32700]  do_splice_direct+0x106/0x190
[  563.022858][T32700]  do_sendfile+0x675/0xc40
[  563.027376][T32700]  __x64_sys_sendfile64+0x102/0x140
[  563.032578][T32700]  do_syscall_64+0x44/0xa0
[  563.036985][T32700]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  563.043024][T32700] RIP: 0033:0x7fac3ad25ae9
00:09:23 executing program 1:
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:23 executing program 0:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:23 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:23 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff080004100000282459801b", 0x39}], 0x1)

[  563.047526][T32700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  563.067185][T32700] RSP: 002b:00007fac38a9c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  563.075595][T32700] RAX: ffffffffffffffda RBX: 00007fac3ae38f60 RCX: 00007fac3ad25ae9
[  563.083569][T32700] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
[  563.091568][T32700] RBP: 00007fac38a9c1d0 R08: 0000000000000000 R09: 0000000000000000
[  563.099533][T32700] R10: 00008400fffffffa R11: 0000000000000246 R12: 0000000000000002
[  563.107501][T32700] R13: 00007ffd54033e4f R14: 00007fac38a9c300 R15: 0000000000022000
[  563.115533][T32700]  </TASK>
[  563.123176][T32705] loop4: detected capacity change from 0 to 264192
[  563.138106][  T348] ==================================================================
[  563.146224][  T348] BUG: KCSAN: data-race in __jbd2_journal_drop_transaction / start_this_handle
[  563.155223][  T348] 
[  563.157524][  T348] write to 0xffff888102a2c078 of 8 bytes by task 32705 on cpu 0:
[  563.165474][  T348]  start_this_handle+0xd37/0x1050
[  563.170477][  T348]  jbd2__journal_start+0x1fc/0x3f0
[  563.175563][  T348]  __ext4_journal_start_sb+0x159/0x310
[  563.181001][  T348]  __ext4_new_inode+0xd95/0x2fc0
[  563.185952][  T348]  ext4_mkdir+0x28a/0x760
[  563.190261][  T348]  vfs_mkdir+0x2c8/0x3d0
[  563.194476][  T348]  do_mkdirat+0x12e/0x2c0
[  563.198793][  T348]  __x64_sys_mkdir+0x40/0x50
[  563.203367][  T348]  do_syscall_64+0x44/0xa0
[  563.207768][  T348]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  563.213639][  T348] 
[  563.215952][  T348] read to 0xffff888102a2c078 of 8 bytes by task 348 on cpu 1:
[  563.223377][  T348]  __jbd2_journal_drop_transaction+0x1f0/0x2f0
[  563.229504][  T348]  __jbd2_journal_remove_checkpoint+0x2d5/0x3a0
[  563.235729][  T348]  jbd2_journal_commit_transaction+0x23f1/0x3460
[  563.242042][  T348]  kjournald2+0x263/0x480
[  563.246358][  T348]  kthread+0x2c7/0x2e0
[  563.250414][  T348]  ret_from_fork+0x1f/0x30
[  563.254810][  T348] 
[  563.257113][  T348] value changed: 0x0000000000000000 -> 0xffff888104b97600
[  563.264196][  T348] 
00:09:23 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff080004110000282459801b", 0x39}], 0x1)

00:09:23 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa) (fail_nth: 18)

00:09:23 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(0xffffffffffffffff, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:23 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:23 executing program 0:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  563.266534][  T348] Reported by Kernel Concurrency Sanitizer on:
[  563.272654][  T348] CPU: 1 PID: 348 Comm: jbd2/sda1-8 Not tainted 5.15.0-syzkaller #0
[  563.280606][  T348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  563.290672][  T348] ==================================================================
00:09:23 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff080004120000282459801b", 0x39}], 0x1)

00:09:23 executing program 0:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x0)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  563.551128][T32717] loop3: detected capacity change from 0 to 264192
[  563.571615][T32719] loop4: detected capacity change from 0 to 264192
[  563.594526][T32720] loop2: detected capacity change from 0 to 264192
[  563.608854][T32717] FAULT_INJECTION: forcing a failure.
[  563.608854][T32717] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  563.622191][T32717] CPU: 0 PID: 32717 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0
[  563.630601][T32717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  563.640659][T32717] Call Trace:
[  563.643935][T32717]  <TASK>
[  563.646865][T32717]  dump_stack_lvl+0xd6/0x122
[  563.651522][T32717]  dump_stack+0x11/0x1b
[  563.655679][T32717]  should_fail+0x23c/0x250
[  563.660183][T32717]  __alloc_pages+0x102/0x330
[  563.664785][T32717]  alloc_pages+0x382/0x3d0
[  563.669251][T32717]  folio_alloc+0x1a/0x20
[  563.673524][T32717]  filemap_alloc_folio+0x53/0xf0
[  563.678459][T32717]  __filemap_get_folio+0x443/0x690
[  563.683568][T32717]  pagecache_get_page+0x26/0xe0
[  563.688420][T32717]  grab_cache_page_write_begin+0x3f/0x50
[  563.694097][T32717]  cont_write_begin+0x4ab/0x7b0
[  563.698954][T32717]  fat_write_begin+0x61/0xf0
[  563.703575][T32717]  ? fat_block_truncate_page+0x30/0x30
[  563.709030][T32717]  generic_perform_write+0x1c8/0x400
[  563.714382][T32717]  __generic_file_write_iter+0x195/0x2b0
[  563.720016][T32717]  ? generic_write_checks+0x250/0x290
[  563.725391][T32717]  generic_file_write_iter+0x75/0x130
[  563.730763][T32717]  do_iter_readv_writev+0x2de/0x380
[  563.735976][T32717]  do_iter_write+0x192/0x5c0
[  563.740645][T32717]  ? splice_from_pipe_next+0x34f/0x3b0
[  563.746114][T32717]  ? kmalloc_array+0x2d/0x40
[  563.750707][T32717]  vfs_iter_write+0x4c/0x70
[  563.755442][T32717]  iter_file_splice_write+0x43a/0x790
[  563.760869][T32717]  ? splice_from_pipe+0xd0/0xd0
[  563.765718][T32717]  direct_splice_actor+0x80/0xa0
[  563.770658][T32717]  splice_direct_to_actor+0x345/0x650
[  563.776045][T32717]  ? do_splice_direct+0x190/0x190
[  563.781145][T32717]  do_splice_direct+0x106/0x190
[  563.785997][T32717]  do_sendfile+0x675/0xc40
[  563.790539][T32717]  __x64_sys_sendfile64+0x102/0x140
[  563.795737][T32717]  do_syscall_64+0x44/0xa0
[  563.800206][T32717]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  563.806214][T32717] RIP: 0033:0x7fac3ad25ae9
[  563.810623][T32717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  563.830302][T32717] RSP: 002b:00007fac38a9c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  563.838728][T32717] RAX: ffffffffffffffda RBX: 00007fac3ae38f60 RCX: 00007fac3ad25ae9
[  563.846697][T32717] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
00:09:23 executing program 0:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x0)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  563.854678][T32717] RBP: 00007fac38a9c1d0 R08: 0000000000000000 R09: 0000000000000000
[  563.862720][T32717] R10: 00008400fffffffa R11: 0000000000000246 R12: 0000000000000002
[  563.870689][T32717] R13: 00007ffd54033e4f R14: 00007fac38a9c300 R15: 0000000000022000
[  563.878719][T32717]  </TASK>
00:09:24 executing program 1:
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:24 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(0xffffffffffffffff, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:24 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa) (fail_nth: 19)

00:09:24 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:24 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff080004250000282459801b", 0x39}], 0x1)

00:09:24 executing program 0:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x0)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:24 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff080004480000282459801b", 0x39}], 0x1)

[  564.380094][T32733] loop4: detected capacity change from 0 to 264192
[  564.380611][T32735] loop3: detected capacity change from 0 to 264192
[  564.392605][T32736] loop2: detected capacity change from 0 to 264192
00:09:24 executing program 0:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(0xffffffffffffffff, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  564.468247][T32735] FAULT_INJECTION: forcing a failure.
[  564.468247][T32735] name failslab, interval 1, probability 0, space 0, times 0
[  564.480961][T32735] CPU: 0 PID: 32735 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0
[  564.489405][T32735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  564.499465][T32735] Call Trace:
[  564.502743][T32735]  <TASK>
[  564.505668][T32735]  dump_stack_lvl+0xd6/0x122
[  564.510345][T32735]  dump_stack+0x11/0x1b
[  564.514502][T32735]  should_fail+0x23c/0x250
[  564.518921][T32735]  ? mempool_alloc_slab+0x16/0x20
[  564.523949][T32735]  __should_failslab+0x81/0x90
[  564.528716][T32735]  should_failslab+0x5/0x20
[  564.533306][T32735]  kmem_cache_alloc+0x4f/0x320
[  564.538147][T32735]  mempool_alloc_slab+0x16/0x20
[  564.543007][T32735]  ? mempool_free+0x130/0x130
[  564.547720][T32735]  mempool_alloc+0x9d/0x310
[  564.552218][T32735]  ? __rcu_read_unlock+0x45/0x290
[  564.557360][T32735]  bio_alloc_bioset+0xcc/0x560
[  564.562129][T32735]  submit_bh_wbc+0x133/0x320
[  564.566743][T32735]  __block_write_full_page+0x648/0xa10
[  564.572202][T32735]  ? mark_buffer_write_io_error+0x180/0x180
[  564.578144][T32735]  ? fat_block_truncate_page+0x30/0x30
[  564.583627][T32735]  block_write_full_page+0x1f0/0x210
[  564.588970][T32735]  ? fat_block_truncate_page+0x30/0x30
[  564.594425][T32735]  fat_writepage+0x20/0x30
[  564.598845][T32735]  __mpage_writepage+0xca8/0x1060
[  564.603938][T32735]  write_cache_pages+0x454/0x7f0
[  564.608966][T32735]  ? mpage_writepages+0x130/0x130
[  564.613993][T32735]  ? fat_block_truncate_page+0x30/0x30
[  564.619453][T32735]  mpage_writepages+0x7f/0x130
[  564.624226][T32735]  ? fat_block_truncate_page+0x30/0x30
[  564.629683][T32735]  ? fat_readpage+0x20/0x20
[  564.634182][T32735]  fat_writepages+0x20/0x30
[  564.638691][T32735]  do_writepages+0x1cb/0x330
[  564.643310][T32735]  ? generic_perform_write+0x397/0x400
[  564.648772][T32735]  filemap_write_and_wait_range+0x1b2/0x340
[  564.654666][T32735]  __generic_file_write_iter+0x1c5/0x2b0
[  564.660300][T32735]  generic_file_write_iter+0x75/0x130
00:09:24 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(0xffffffffffffffff, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:24 executing program 1:
syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:24 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:24 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff0800044c0000282459801b", 0x39}], 0x1)

[  564.665676][T32735]  do_iter_readv_writev+0x2de/0x380
[  564.670886][T32735]  do_iter_write+0x192/0x5c0
[  564.675488][T32735]  ? splice_from_pipe_next+0x34f/0x3b0
[  564.681034][T32735]  ? kmalloc_array+0x2d/0x40
[  564.685626][T32735]  vfs_iter_write+0x4c/0x70
[  564.690130][T32735]  iter_file_splice_write+0x43a/0x790
[  564.695510][T32735]  ? splice_from_pipe+0xd0/0xd0
[  564.700361][T32735]  direct_splice_actor+0x80/0xa0
[  564.705303][T32735]  splice_direct_to_actor+0x345/0x650
[  564.710678][T32735]  ? do_splice_direct+0x190/0x190
[  564.715708][T32735]  do_splice_direct+0x106/0x190
[  564.720594][T32735]  do_sendfile+0x675/0xc40
[  564.725020][T32735]  __x64_sys_sendfile64+0x102/0x140
[  564.730278][T32735]  do_syscall_64+0x44/0xa0
[  564.734709][T32735]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  564.740624][T32735] RIP: 0033:0x7fac3ad25ae9
[  564.745020][T32735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  564.764619][T32735] RSP: 002b:00007fac38a9c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  564.773013][T32735] RAX: ffffffffffffffda RBX: 00007fac3ae38f60 RCX: 00007fac3ad25ae9
[  564.781084][T32735] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
[  564.789041][T32735] RBP: 00007fac38a9c1d0 R08: 0000000000000000 R09: 0000000000000000
[  564.790139][T32747] loop1: detected capacity change from 0 to 264192
[  564.797189][T32735] R10: 00008400fffffffa R11: 0000000000000246 R12: 0000000000000002
[  564.797204][T32735] R13: 00007ffd54033e4f R14: 00007fac38a9c300 R15: 0000000000022000
00:09:24 executing program 0:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(0xffffffffffffffff, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  564.797219][T32735]  </TASK>
00:09:24 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa) (fail_nth: 20)

00:09:24 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff080004600000282459801b", 0x39}], 0x1)

00:09:25 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x0)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  564.967741][T32753] loop2: detected capacity change from 0 to 264192
[  564.981414][T32756] loop4: detected capacity change from 0 to 264192
00:09:25 executing program 0:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(0xffffffffffffffff, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:25 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff080004680000282459801b", 0x39}], 0x1)

[  565.108780][T32759] loop3: detected capacity change from 0 to 264192
[  565.149093][T32763] loop2: detected capacity change from 0 to 264192
[  565.153998][T32759] FAULT_INJECTION: forcing a failure.
[  565.153998][T32759] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  565.168986][T32759] CPU: 1 PID: 32759 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0
[  565.177400][T32759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  565.187507][T32759] Call Trace:
[  565.190781][T32759]  <TASK>
[  565.193721][T32759]  dump_stack_lvl+0xd6/0x122
[  565.198311][T32759]  dump_stack+0x11/0x1b
[  565.202504][T32759]  should_fail+0x23c/0x250
[  565.206951][T32759]  __alloc_pages+0x102/0x330
[  565.211539][T32759]  alloc_pages+0x382/0x3d0
[  565.216018][T32759]  folio_alloc+0x1a/0x20
[  565.220256][T32759]  filemap_alloc_folio+0x53/0xf0
[  565.225228][T32759]  page_cache_ra_unbounded+0x1c0/0x430
[  565.230730][T32759]  ondemand_readahead+0x4f8/0x700
[  565.235834][T32759]  page_cache_sync_ra+0xaf/0xe0
[  565.240686][T32759]  filemap_read+0x3eb/0x16d0
[  565.245352][T32759]  ? __rcu_read_unlock+0x5c/0x290
[  565.250411][T32759]  generic_file_read_iter+0x72/0x2a0
[  565.255755][T32759]  ? iov_iter_pipe+0x100/0x150
[  565.260536][T32759]  generic_file_splice_read+0x24f/0x330
[  565.266086][T32759]  ? splice_shrink_spd+0x60/0x60
[  565.271016][T32759]  splice_direct_to_actor+0x2aa/0x650
[  565.276368][T32759]  ? do_splice_direct+0x190/0x190
[  565.281482][T32759]  do_splice_direct+0x106/0x190
[  565.286336][T32759]  do_sendfile+0x675/0xc40
[  565.290747][T32759]  __x64_sys_sendfile64+0x102/0x140
[  565.295922][T32759]  do_syscall_64+0x44/0xa0
[  565.300348][T32759]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  565.306326][T32759] RIP: 0033:0x7fac3ad25ae9
[  565.311436][T32759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  565.331232][T32759] RSP: 002b:00007fac38a9c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  565.339699][T32759] RAX: ffffffffffffffda RBX: 00007fac3ae38f60 RCX: 00007fac3ad25ae9
00:09:25 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  565.347770][T32759] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
[  565.355727][T32759] RBP: 00007fac38a9c1d0 R08: 0000000000000000 R09: 0000000000000000
[  565.363695][T32759] R10: 00008400fffffffa R11: 0000000000000246 R12: 0000000000000002
[  565.371657][T32759] R13: 00007ffd54033e4f R14: 00007fac38a9c300 R15: 0000000000022000
[  565.379611][T32759]  </TASK>
00:09:25 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff0800046c0000282459801b", 0x39}], 0x1)

00:09:25 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa) (fail_nth: 21)

[  565.617875][  T306] loop4: detected capacity change from 0 to 264192
00:09:25 executing program 1:
syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:25 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x0)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:25 executing program 0:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x0, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:25 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff080004740000282459801b", 0x39}], 0x1)

[  565.665411][  T308] loop3: detected capacity change from 0 to 264192
[  565.690691][  T308] FAULT_INJECTION: forcing a failure.
[  565.690691][  T308] name failslab, interval 1, probability 0, space 0, times 0
[  565.703352][  T308] CPU: 1 PID: 308 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0
[  565.711602][  T308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  565.721652][  T308] Call Trace:
[  565.724933][  T308]  <TASK>
[  565.727862][  T308]  dump_stack_lvl+0xd6/0x122
[  565.732524][  T308]  dump_stack+0x11/0x1b
[  565.736747][  T308]  should_fail+0x23c/0x250
[  565.741187][  T308]  ? mempool_alloc_slab+0x16/0x20
[  565.746211][  T308]  __should_failslab+0x81/0x90
[  565.751044][  T308]  should_failslab+0x5/0x20
[  565.755546][  T308]  kmem_cache_alloc+0x4f/0x320
[  565.760312][  T308]  mempool_alloc_slab+0x16/0x20
[  565.765163][  T308]  ? mempool_free+0x130/0x130
[  565.769828][  T308]  mempool_alloc+0x9d/0x310
[  565.774320][  T308]  ? fat_get_block+0x317/0x610
[  565.779135][  T308]  bio_alloc_bioset+0xcc/0x560
[  565.783935][  T308]  ? bdev_read_page+0x83/0xe0
[  565.788662][  T308]  do_mpage_readpage+0xc4a/0x1040
[  565.793689][  T308]  ? xa_load+0x259/0x270
[  565.797924][  T308]  mpage_readahead+0x188/0x2c0
[  565.802736][  T308]  ? fat_block_truncate_page+0x30/0x30
[  565.808264][  T308]  fat_readahead+0x18/0x20
[  565.812670][  T308]  read_pages+0xba/0x5f0
[  565.816903][  T308]  page_cache_ra_unbounded+0x3d2/0x430
[  565.822415][  T308]  ondemand_readahead+0x4f8/0x700
[  565.827490][  T308]  page_cache_sync_ra+0xaf/0xe0
[  565.832384][  T308]  filemap_read+0x3eb/0x16d0
[  565.837003][  T308]  ? __rcu_read_unlock+0x5c/0x290
[  565.842101][  T308]  generic_file_read_iter+0x72/0x2a0
[  565.847380][  T308]  ? iov_iter_pipe+0x100/0x150
[  565.852130][  T308]  generic_file_splice_read+0x24f/0x330
[  565.857665][  T308]  ? splice_shrink_spd+0x60/0x60
[  565.862586][  T308]  splice_direct_to_actor+0x2aa/0x650
[  565.867942][  T308]  ? do_splice_direct+0x190/0x190
[  565.872954][  T308]  do_splice_direct+0x106/0x190
[  565.877788][  T308]  do_sendfile+0x675/0xc40
[  565.882255][  T308]  __x64_sys_sendfile64+0x102/0x140
[  565.887461][  T308]  do_syscall_64+0x44/0xa0
[  565.891904][  T308]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  565.897844][  T308] RIP: 0033:0x7fac3ad25ae9
[  565.902396][  T308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  565.922075][  T308] RSP: 002b:00007fac38a9c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  565.930514][  T308] RAX: ffffffffffffffda RBX: 00007fac3ae38f60 RCX: 00007fac3ad25ae9
[  565.938485][  T308] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
[  565.946524][  T308] RBP: 00007fac38a9c1d0 R08: 0000000000000000 R09: 0000000000000000
[  565.954478][  T308] R10: 00008400fffffffa R11: 0000000000000246 R12: 0000000000000002
[  565.962465][  T308] R13: 00007ffd54033e4f R14: 00007fac38a9c300 R15: 0000000000022000
[  565.970571][  T308]  </TASK>
00:09:26 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa) (fail_nth: 22)

[  566.038580][  T312] loop2: detected capacity change from 0 to 264192
00:09:26 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x0)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:26 executing program 0:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x0, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:26 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff080004770000282459801b", 0x39}], 0x1)

00:09:26 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  566.113942][  T314] validate_nla: 10 callbacks suppressed
[  566.113956][  T314] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
00:09:26 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff0800047a0000282459801b", 0x39}], 0x1)

[  566.282350][  T319] loop1: detected capacity change from 0 to 264192
[  566.292950][  T321] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  566.316365][  T323] loop3: detected capacity change from 0 to 264192
00:09:26 executing program 0:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x0, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  566.357026][  T323] FAULT_INJECTION: forcing a failure.
[  566.357026][  T323] name failslab, interval 1, probability 0, space 0, times 0
[  566.370022][  T323] CPU: 1 PID: 323 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0
[  566.378245][  T323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  566.388339][  T323] Call Trace:
[  566.391610][  T323]  <TASK>
[  566.394527][  T323]  dump_stack_lvl+0xd6/0x122
[  566.399096][  T323]  dump_stack+0x11/0x1b
[  566.403227][  T323]  should_fail+0x23c/0x250
[  566.407626][  T323]  ? kmalloc_array+0x2d/0x40
[  566.412274][  T323]  __should_failslab+0x81/0x90
[  566.417023][  T323]  should_failslab+0x5/0x20
[  566.421588][  T323]  __kmalloc+0x6f/0x370
[  566.425730][  T323]  kmalloc_array+0x2d/0x40
[  566.430129][  T323]  iter_file_splice_write+0xd5/0x790
[  566.435395][  T323]  ? atime_needs_update+0xda/0x390
[  566.440493][  T323]  ? touch_atime+0x11f/0x2e0
[  566.445102][  T323]  ? generic_file_splice_read+0x2a9/0x330
[  566.450814][  T323]  ? splice_from_pipe+0xd0/0xd0
[  566.455736][  T323]  direct_splice_actor+0x80/0xa0
[  566.460704][  T323]  splice_direct_to_actor+0x345/0x650
[  566.466076][  T323]  ? do_splice_direct+0x190/0x190
[  566.471087][  T323]  do_splice_direct+0x106/0x190
[  566.475965][  T323]  do_sendfile+0x675/0xc40
[  566.480404][  T323]  __x64_sys_sendfile64+0x102/0x140
[  566.485586][  T323]  do_syscall_64+0x44/0xa0
[  566.489986][  T323]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  566.495964][  T323] RIP: 0033:0x7fac3ad25ae9
[  566.500358][  T323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  566.520063][  T323] RSP: 002b:00007fac38a9c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  566.528495][  T323] RAX: ffffffffffffffda RBX: 00007fac3ae38f60 RCX: 00007fac3ad25ae9
[  566.536458][  T323] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
[  566.544410][  T323] RBP: 00007fac38a9c1d0 R08: 0000000000000000 R09: 0000000000000000
00:09:26 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa) (fail_nth: 23)

[  566.552382][  T323] R10: 00008400fffffffa R11: 0000000000000246 R12: 0000000000000002
[  566.560343][  T323] R13: 00007ffd54033e4f R14: 00007fac38a9c300 R15: 0000000000022000
[  566.568378][  T323]  </TASK>
[  566.575217][  T325] loop4: detected capacity change from 0 to 264192
[  566.582937][  T326] loop2: detected capacity change from 0 to 264192
[  566.778962][  T329] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  566.846503][  T332] loop3: detected capacity change from 0 to 264192
[  566.873712][  T332] FAULT_INJECTION: forcing a failure.
[  566.873712][  T332] name failslab, interval 1, probability 0, space 0, times 0
[  566.886450][  T332] CPU: 0 PID: 332 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0
[  566.894693][  T332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  566.904774][  T332] Call Trace:
[  566.908049][  T332]  <TASK>
[  566.910970][  T332]  dump_stack_lvl+0xd6/0x122
[  566.915564][  T332]  dump_stack+0x11/0x1b
[  566.919712][  T332]  should_fail+0x23c/0x250
[  566.924146][  T332]  ? __blockdev_direct_IO+0x145/0x2420
[  566.929605][  T332]  __should_failslab+0x81/0x90
[  566.934372][  T332]  should_failslab+0x5/0x20
[  566.938942][  T332]  kmem_cache_alloc+0x4f/0x320
[  566.943769][  T332]  __blockdev_direct_IO+0x145/0x2420
[  566.949082][  T332]  ? debug_smp_processor_id+0x18/0x20
[  566.954457][  T332]  ? free_unref_page_list+0x1f3/0x230
[  566.959835][  T332]  ? fat_block_truncate_page+0x30/0x30
[  566.965401][  T332]  ? find_get_entries+0x2d1/0x300
[  566.970433][  T332]  ? invalidate_inode_pages2_range+0x73e/0x790
[  566.976588][  T332]  fat_direct_IO+0x111/0x1e0
[  566.981163][  T332]  generic_file_direct_write+0x27c/0x410
[  566.986980][  T332]  ? file_update_time+0x1b4/0x230
[  566.992330][  T332]  __generic_file_write_iter+0x13d/0x2b0
[  566.997950][  T332]  ? generic_write_checks+0x250/0x290
[  567.003421][  T332]  generic_file_write_iter+0x75/0x130
[  567.008840][  T332]  do_iter_readv_writev+0x2de/0x380
[  567.014124][  T332]  do_iter_write+0x192/0x5c0
[  567.018711][  T332]  ? splice_from_pipe_next+0x34f/0x3b0
[  567.024180][  T332]  ? kmalloc_array+0x2d/0x40
[  567.028784][  T332]  vfs_iter_write+0x4c/0x70
[  567.033277][  T332]  iter_file_splice_write+0x43a/0x790
[  567.038654][  T332]  ? splice_from_pipe+0xd0/0xd0
[  567.043490][  T332]  direct_splice_actor+0x80/0xa0
[  567.048465][  T332]  splice_direct_to_actor+0x345/0x650
[  567.053866][  T332]  ? do_splice_direct+0x190/0x190
[  567.058901][  T332]  do_splice_direct+0x106/0x190
[  567.063752][  T332]  do_sendfile+0x675/0xc40
[  567.068212][  T332]  __x64_sys_sendfile64+0x102/0x140
[  567.073413][  T332]  do_syscall_64+0x44/0xa0
[  567.077926][  T332]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  567.083825][  T332] RIP: 0033:0x7fac3ad25ae9
[  567.088233][  T332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  567.107826][  T332] RSP: 002b:00007fac38a9c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  567.116264][  T332] RAX: ffffffffffffffda RBX: 00007fac3ae38f60 RCX: 00007fac3ad25ae9
[  567.124429][  T332] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
[  567.132491][  T332] RBP: 00007fac38a9c1d0 R08: 0000000000000000 R09: 0000000000000000
[  567.140446][  T332] R10: 00008400fffffffa R11: 0000000000000246 R12: 0000000000000002
[  567.148401][  T332] R13: 00007ffd54033e4f R14: 00007fac38a9c300 R15: 0000000000022000
[  567.156419][  T332]  </TASK>
00:09:27 executing program 1:
syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:27 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(0xffffffffffffffff, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:27 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff080004000300282459801b", 0x39}], 0x1)

00:09:27 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:27 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa) (fail_nth: 24)

00:09:27 executing program 0:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  567.250157][  T339] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  567.250990][  T338] loop2: detected capacity change from 0 to 264192
[  567.258855][  T340] loop4: detected capacity change from 0 to 264192
00:09:27 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff080004000500282459801b", 0x39}], 0x1)

00:09:27 executing program 0:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:27 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(0xffffffffffffffff, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  567.383595][  T343] loop3: detected capacity change from 0 to 264192
[  567.410548][  T344] loop1: detected capacity change from 0 to 264192
[  567.442009][  T343] FAULT_INJECTION: forcing a failure.
[  567.442009][  T343] name failslab, interval 1, probability 0, space 0, times 0
[  567.454825][  T343] CPU: 0 PID: 343 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0
[  567.463068][  T343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  567.473165][  T343] Call Trace:
[  567.476439][  T343]  <TASK>
[  567.479360][  T343]  dump_stack_lvl+0xd6/0x122
[  567.484031][  T343]  dump_stack+0x11/0x1b
[  567.488228][  T343]  should_fail+0x23c/0x250
[  567.492680][  T343]  ? mempool_alloc_slab+0x16/0x20
[  567.497704][  T343]  __should_failslab+0x81/0x90
[  567.502469][  T343]  should_failslab+0x5/0x20
[  567.506972][  T343]  kmem_cache_alloc+0x4f/0x320
[  567.511817][  T343]  mempool_alloc_slab+0x16/0x20
[  567.516669][  T343]  ? mempool_free+0x130/0x130
[  567.521365][  T343]  mempool_alloc+0x9d/0x310
[  567.525922][  T343]  bio_alloc_bioset+0xcc/0x560
[  567.530687][  T343]  dio_new_bio+0x389/0x4f0
[  567.535159][  T343]  ? should_fail+0xd6/0x250
00:09:27 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  567.539678][  T343]  dio_send_cur_page+0x273/0x700
[  567.544698][  T343]  __blockdev_direct_IO+0x1a4d/0x2420
[  567.550209][  T343]  ? fat_block_truncate_page+0x30/0x30
[  567.555731][  T343]  fat_direct_IO+0x111/0x1e0
[  567.559181][  T347] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  567.560395][  T343]  generic_file_direct_write+0x27c/0x410
[  567.574163][  T343]  ? file_update_time+0x1b4/0x230
[  567.579248][  T343]  __generic_file_write_iter+0x13d/0x2b0
[  567.584955][  T343]  ? generic_write_checks+0x250/0x290
00:09:27 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff080004000600282459801b", 0x39}], 0x1)

00:09:27 executing program 0:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  567.590406][  T343]  generic_file_write_iter+0x75/0x130
[  567.595784][  T343]  do_iter_readv_writev+0x2de/0x380
[  567.601117][  T343]  do_iter_write+0x192/0x5c0
[  567.605707][  T343]  ? splice_from_pipe_next+0x34f/0x3b0
[  567.611194][  T343]  ? kmalloc_array+0x2d/0x40
[  567.615808][  T343]  vfs_iter_write+0x4c/0x70
[  567.620407][  T343]  iter_file_splice_write+0x43a/0x790
[  567.625841][  T343]  ? splice_from_pipe+0xd0/0xd0
[  567.630768][  T343]  direct_splice_actor+0x80/0xa0
[  567.632184][  T352] loop2: detected capacity change from 0 to 264192
[  567.635691][  T343]  splice_direct_to_actor+0x345/0x650
[  567.635717][  T343]  ? do_splice_direct+0x190/0x190
[  567.652563][  T343]  do_splice_direct+0x106/0x190
[  567.657482][  T343]  do_sendfile+0x675/0xc40
[  567.661922][  T343]  __x64_sys_sendfile64+0x102/0x140
[  567.667192][  T343]  do_syscall_64+0x44/0xa0
[  567.671615][  T343]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  567.677505][  T343] RIP: 0033:0x7fac3ad25ae9
[  567.681929][  T343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  567.701583][  T343] RSP: 002b:00007fac38a9c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  567.709992][  T343] RAX: ffffffffffffffda RBX: 00007fac3ae38f60 RCX: 00007fac3ad25ae9
[  567.717997][  T343] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
[  567.725959][  T343] RBP: 00007fac38a9c1d0 R08: 0000000000000000 R09: 0000000000000000
[  567.733918][  T343] R10: 00008400fffffffa R11: 0000000000000246 R12: 0000000000000002
00:09:27 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(0xffffffffffffffff, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  567.741874][  T343] R13: 00007ffd54033e4f R14: 00007fac38a9c300 R15: 0000000000022000
[  567.749855][  T343]  </TASK>
[  567.821112][  T356] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  567.896243][  T359] loop4: detected capacity change from 0 to 264192
[  567.986207][  T361] loop2: detected capacity change from 0 to 264192
00:09:28 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff080004000700282459801b", 0x39}], 0x1)

00:09:28 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:28 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa) (fail_nth: 25)

00:09:28 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), 0x0, 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:28 executing program 0:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x8400fffffffa)

00:09:28 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x0, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:28 executing program 0:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x8400fffffffa)

00:09:28 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff080004000900282459801b", 0x39}], 0x1)

[  568.307032][  T374] loop3: detected capacity change from 0 to 264192
[  568.314079][  T375] loop2: detected capacity change from 0 to 264192
[  568.321019][  T373] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  568.329698][  T376] loop4: detected capacity change from 0 to 264192
[  568.384140][  T374] FAULT_INJECTION: forcing a failure.
[  568.384140][  T374] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  568.397429][  T374] CPU: 0 PID: 374 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0
[  568.405789][  T374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  568.415849][  T374] Call Trace:
[  568.419126][  T374]  <TASK>
[  568.422051][  T374]  dump_stack_lvl+0xd6/0x122
[  568.426654][  T374]  dump_stack+0x11/0x1b
[  568.430812][  T374]  should_fail+0x23c/0x250
[  568.435238][  T374]  __alloc_pages+0x102/0x330
[  568.439849][  T374]  alloc_pages+0x382/0x3d0
[  568.444285][  T374]  folio_alloc+0x1a/0x20
[  568.448532][  T374]  filemap_alloc_folio+0x53/0xf0
[  568.453561][  T374]  page_cache_ra_unbounded+0x1c0/0x430
[  568.459272][  T374]  ondemand_readahead+0x4f8/0x700
[  568.464451][  T374]  page_cache_sync_ra+0xaf/0xe0
[  568.469309][  T374]  filemap_read+0x3eb/0x16d0
[  568.473905][  T374]  ? __rcu_read_unlock+0x5c/0x290
[  568.478971][  T374]  generic_file_read_iter+0x72/0x2a0
[  568.484263][  T374]  ? iov_iter_pipe+0x100/0x150
[  568.489178][  T374]  generic_file_splice_read+0x24f/0x330
[  568.494763][  T374]  ? splice_shrink_spd+0x60/0x60
[  568.499701][  T374]  splice_direct_to_actor+0x2aa/0x650
[  568.505076][  T374]  ? do_splice_direct+0x190/0x190
[  568.510165][  T374]  do_splice_direct+0x106/0x190
[  568.515070][  T374]  do_sendfile+0x675/0xc40
[  568.519560][  T374]  __x64_sys_sendfile64+0x102/0x140
[  568.524830][  T374]  do_syscall_64+0x44/0xa0
00:09:28 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:28 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x0, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:28 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff080004000a00282459801b", 0x39}], 0x1)

[  568.529261][  T374]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  568.535198][  T374] RIP: 0033:0x7fac3ad25ae9
[  568.539628][  T374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  568.556705][  T379] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  568.559313][  T374] RSP: 002b:00007fac38a9c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  568.559335][  T374] RAX: ffffffffffffffda RBX: 00007fac3ae38f60 RCX: 00007fac3ad25ae9
00:09:28 executing program 0:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x8400fffffffa)

[  568.559406][  T374] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
[  568.559418][  T374] RBP: 00007fac38a9c1d0 R08: 0000000000000000 R09: 0000000000000000
[  568.559429][  T374] R10: 00008400fffffffa R11: 0000000000000246 R12: 0000000000000002
[  568.559440][  T374] R13: 00007ffd54033e4f R14: 00007fac38a9c300 R15: 0000000000022000
[  568.615934][  T374]  </TASK>
[  568.677322][  T384] loop1: detected capacity change from 0 to 264192
[  568.700477][  T385] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  568.772281][  T390] loop2: detected capacity change from 0 to 264192
[  568.785917][  T391] loop4: detected capacity change from 0 to 264192
00:09:29 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff080004000b00282459801b", 0x39}], 0x1)

00:09:29 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa) (fail_nth: 26)

00:09:29 executing program 0:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa)

00:09:29 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), 0x0, 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:29 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x0, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:29 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:29 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff080004000c00282459801b", 0x39}], 0x1)

[  569.553874][  T397] loop2: detected capacity change from 0 to 264192
[  569.554424][  T398] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  569.575841][  T400] loop4: detected capacity change from 0 to 264192
[  569.576396][  T401] loop3: detected capacity change from 0 to 264192
00:09:29 executing program 0:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa)

00:09:29 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:29 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  569.673462][  T401] FAULT_INJECTION: forcing a failure.
[  569.673462][  T401] name failslab, interval 1, probability 0, space 0, times 0
[  569.686254][  T401] CPU: 0 PID: 401 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0
[  569.694557][  T401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  569.704609][  T401] Call Trace:
[  569.707881][  T401]  <TASK>
[  569.710813][  T401]  dump_stack_lvl+0xd6/0x122
[  569.715424][  T401]  dump_stack+0x11/0x1b
[  569.719574][  T401]  should_fail+0x23c/0x250
[  569.723992][  T401]  ? mempool_alloc_slab+0x16/0x20
[  569.729010][  T401]  __should_failslab+0x81/0x90
[  569.733764][  T401]  should_failslab+0x5/0x20
[  569.734456][  T404] loop1: detected capacity change from 0 to 264192
[  569.738274][  T401]  kmem_cache_alloc+0x4f/0x320
[  569.738301][  T401]  mempool_alloc_slab+0x16/0x20
[  569.754397][  T401]  ? mempool_free+0x130/0x130
[  569.759087][  T401]  mempool_alloc+0x9d/0x310
[  569.763594][  T401]  ? fat_get_block+0x317/0x610
[  569.768453][  T401]  bio_alloc_bioset+0xcc/0x560
[  569.773280][  T401]  ? bdev_read_page+0x83/0xe0
[  569.777956][  T401]  do_mpage_readpage+0xc4a/0x1040
[  569.783009][  T401]  ? xa_load+0x259/0x270
[  569.787317][  T401]  mpage_readahead+0x188/0x2c0
[  569.792070][  T401]  ? fat_block_truncate_page+0x30/0x30
[  569.797533][  T401]  fat_readahead+0x18/0x20
[  569.801962][  T401]  read_pages+0xba/0x5f0
[  569.806196][  T401]  page_cache_ra_unbounded+0x3d2/0x430
[  569.811709][  T401]  ondemand_readahead+0x4f8/0x700
[  569.816797][  T401]  page_cache_sync_ra+0xaf/0xe0
[  569.821680][  T401]  filemap_read+0x3eb/0x16d0
[  569.826255][  T401]  ? __rcu_read_unlock+0x5c/0x290
[  569.831277][  T401]  generic_file_read_iter+0x72/0x2a0
[  569.836547][  T401]  ? iov_iter_pipe+0x100/0x150
[  569.841298][  T401]  generic_file_splice_read+0x24f/0x330
[  569.846842][  T401]  ? splice_shrink_spd+0x60/0x60
[  569.851813][  T401]  splice_direct_to_actor+0x2aa/0x650
[  569.857180][  T401]  ? do_splice_direct+0x190/0x190
[  569.862236][  T401]  do_splice_direct+0x106/0x190
[  569.867175][  T401]  do_sendfile+0x675/0xc40
[  569.871575][  T401]  __x64_sys_sendfile64+0x102/0x140
[  569.876758][  T401]  do_syscall_64+0x44/0xa0
[  569.881160][  T401]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  569.887044][  T401] RIP: 0033:0x7fac3ad25ae9
[  569.891442][  T401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  569.911088][  T401] RSP: 002b:00007fac38a9c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
00:09:30 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff080004000d00282459801b", 0x39}], 0x1)

[  569.919511][  T401] RAX: ffffffffffffffda RBX: 00007fac3ae38f60 RCX: 00007fac3ad25ae9
[  569.927527][  T401] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
[  569.935581][  T401] RBP: 00007fac38a9c1d0 R08: 0000000000000000 R09: 0000000000000000
[  569.943602][  T401] R10: 00008400fffffffa R11: 0000000000000246 R12: 0000000000000002
[  569.951757][  T401] R13: 00007ffd54033e4f R14: 00007fac38a9c300 R15: 0000000000022000
[  569.959715][  T401]  </TASK>
00:09:30 executing program 0:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa)

00:09:30 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa) (fail_nth: 27)

00:09:30 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff080004000e00282459801b", 0x39}], 0x1)

[  570.150649][  T539] loop4: detected capacity change from 0 to 264192
[  570.161904][  T540] loop2: detected capacity change from 0 to 264192
00:09:30 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  570.223155][  T543] loop3: detected capacity change from 0 to 264192
[  570.265459][  T543] FAULT_INJECTION: forcing a failure.
[  570.265459][  T543] name failslab, interval 1, probability 0, space 0, times 0
[  570.278219][  T543] CPU: 0 PID: 543 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0
[  570.286464][  T543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  570.296576][  T543] Call Trace:
[  570.299853][  T543]  <TASK>
[  570.302870][  T543]  dump_stack_lvl+0xd6/0x122
[  570.307445][  T543]  dump_stack+0x11/0x1b
[  570.311787][  T543]  should_fail+0x23c/0x250
[  570.316209][  T543]  ? kmalloc_array+0x2d/0x40
[  570.320847][  T543]  __should_failslab+0x81/0x90
[  570.325616][  T543]  should_failslab+0x5/0x20
[  570.330196][  T543]  __kmalloc+0x6f/0x370
[  570.334365][  T543]  kmalloc_array+0x2d/0x40
[  570.338792][  T543]  iter_file_splice_write+0xd5/0x790
[  570.344158][  T543]  ? atime_needs_update+0xda/0x390
[  570.349277][  T543]  ? touch_atime+0x11f/0x2e0
[  570.353933][  T543]  ? generic_file_splice_read+0x2a9/0x330
[  570.359830][  T543]  ? splice_from_pipe+0xd0/0xd0
[  570.364818][  T543]  direct_splice_actor+0x80/0xa0
[  570.369763][  T543]  splice_direct_to_actor+0x345/0x650
[  570.375150][  T543]  ? do_splice_direct+0x190/0x190
[  570.380155][  T543]  do_splice_direct+0x106/0x190
[  570.385116][  T543]  do_sendfile+0x675/0xc40
[  570.389531][  T543]  __x64_sys_sendfile64+0x102/0x140
[  570.394784][  T543]  do_syscall_64+0x44/0xa0
[  570.399191][  T543]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  570.405085][  T543] RIP: 0033:0x7fac3ad25ae9
[  570.409479][  T543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  570.429067][  T543] RSP: 002b:00007fac38a9c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  570.437621][  T543] RAX: ffffffffffffffda RBX: 00007fac3ae38f60 RCX: 00007fac3ad25ae9
[  570.445575][  T543] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
[  570.453536][  T543] RBP: 00007fac38a9c1d0 R08: 0000000000000000 R09: 0000000000000000
[  570.461679][  T543] R10: 00008400fffffffa R11: 0000000000000246 R12: 0000000000000002
[  570.469631][  T543] R13: 00007ffd54033e4f R14: 00007fac38a9c300 R15: 0000000000022000
[  570.477644][  T543]  </TASK>
00:09:30 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:30 executing program 0:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x0)

00:09:30 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), 0x0, 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:30 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff080004001100282459801b", 0x39}], 0x1)

00:09:30 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa) (fail_nth: 28)

00:09:30 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x0)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  570.528979][  T547] loop4: detected capacity change from 0 to 264192
00:09:30 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff080004001200282459801b", 0x39}], 0x1)

00:09:30 executing program 0:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x0)

00:09:30 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  570.646521][  T554] loop2: detected capacity change from 0 to 264192
[  570.663507][  T555] loop3: detected capacity change from 0 to 264192
[  570.709312][  T555] FAULT_INJECTION: forcing a failure.
[  570.709312][  T555] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  570.722584][  T555] CPU: 0 PID: 555 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0
[  570.730857][  T555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  570.740932][  T555] Call Trace:
[  570.744236][  T555]  <TASK>
[  570.747168][  T555]  dump_stack_lvl+0xd6/0x122
[  570.751774][  T555]  dump_stack+0x11/0x1b
[  570.755931][  T555]  should_fail+0x23c/0x250
[  570.759206][  T559] loop1: detected capacity change from 0 to 264192
[  570.760419][  T555]  __alloc_pages+0x102/0x330
[  570.760449][  T555]  alloc_pages+0x382/0x3d0
[  570.760468][  T555]  folio_alloc+0x1a/0x20
[  570.780167][  T555]  filemap_alloc_folio+0x53/0xf0
[  570.785128][  T555]  __filemap_get_folio+0x443/0x690
[  570.790239][  T555]  pagecache_get_page+0x26/0xe0
[  570.795089][  T555]  grab_cache_page_write_begin+0x3f/0x50
[  570.800822][  T555]  cont_write_begin+0x4ab/0x7b0
[  570.805727][  T555]  fat_write_begin+0x61/0xf0
[  570.810343][  T555]  ? fat_block_truncate_page+0x30/0x30
[  570.815827][  T555]  generic_perform_write+0x1c8/0x400
[  570.821097][  T555]  __generic_file_write_iter+0x195/0x2b0
[  570.826713][  T555]  ? generic_write_checks+0x250/0x290
[  570.832067][  T555]  generic_file_write_iter+0x75/0x130
[  570.837424][  T555]  do_iter_readv_writev+0x2de/0x380
[  570.842608][  T555]  do_iter_write+0x192/0x5c0
[  570.847228][  T555]  ? splice_from_pipe_next+0x34f/0x3b0
[  570.852673][  T555]  ? kmalloc_array+0x2d/0x40
[  570.857268][  T555]  vfs_iter_write+0x4c/0x70
[  570.861798][  T555]  iter_file_splice_write+0x43a/0x790
[  570.867156][  T555]  ? splice_from_pipe+0xd0/0xd0
[  570.872004][  T555]  direct_splice_actor+0x80/0xa0
[  570.876930][  T555]  splice_direct_to_actor+0x345/0x650
[  570.882286][  T555]  ? do_splice_direct+0x190/0x190
[  570.887324][  T555]  do_splice_direct+0x106/0x190
[  570.892213][  T555]  do_sendfile+0x675/0xc40
[  570.896629][  T555]  __x64_sys_sendfile64+0x102/0x140
[  570.901812][  T555]  do_syscall_64+0x44/0xa0
[  570.906303][  T555]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  570.912200][  T555] RIP: 0033:0x7fac3ad25ae9
[  570.916601][  T555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  570.936191][  T555] RSP: 002b:00007fac38a9c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  570.944642][  T555] RAX: ffffffffffffffda RBX: 00007fac3ae38f60 RCX: 00007fac3ad25ae9
[  570.952609][  T555] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
00:09:31 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa) (fail_nth: 29)

00:09:31 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff080004d41500282459801b", 0x39}], 0x1)

[  570.960572][  T555] RBP: 00007fac38a9c1d0 R08: 0000000000000000 R09: 0000000000000000
[  570.968526][  T555] R10: 00008400fffffffa R11: 0000000000000246 R12: 0000000000000002
[  570.976481][  T555] R13: 00007ffd54033e4f R14: 00007fac38a9c300 R15: 0000000000022000
[  570.984508][  T555]  </TASK>
[  570.989066][  T561] loop4: detected capacity change from 0 to 264192
00:09:31 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x0)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:31 executing program 0:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x0)

00:09:31 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff080004002000282459801b", 0x39}], 0x1)

[  571.210121][  T669] loop2: detected capacity change from 0 to 264192
[  571.218661][  T670] validate_nla: 3 callbacks suppressed
[  571.218673][  T670] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  571.282117][  T673] loop3: detected capacity change from 0 to 264192
[  571.311993][  T673] FAULT_INJECTION: forcing a failure.
[  571.311993][  T673] name failslab, interval 1, probability 0, space 0, times 0
[  571.326036][  T673] CPU: 0 PID: 673 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0
[  571.334210][  T676] loop4: detected capacity change from 0 to 264192
[  571.334329][  T673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  571.350856][  T673] Call Trace:
[  571.354138][  T673]  <TASK>
[  571.357114][  T673]  dump_stack_lvl+0xd6/0x122
[  571.361746][  T673]  dump_stack+0x11/0x1b
[  571.365895][  T673]  should_fail+0x23c/0x250
[  571.370403][  T673]  ? xas_create+0x3fb/0xb10
[  571.374890][  T673]  __should_failslab+0x81/0x90
[  571.379653][  T673]  should_failslab+0x5/0x20
[  571.384240][  T673]  kmem_cache_alloc+0x4f/0x320
[  571.389003][  T673]  xas_create+0x3fb/0xb10
[  571.393362][  T673]  xas_store+0x70/0xca0
[  571.397546][  T673]  ? xas_find_conflict+0x422/0x4c0
[  571.402698][  T673]  __filemap_add_folio+0x1e8/0x4d0
[  571.407805][  T673]  ? workingset_activation+0x2b0/0x2b0
[  571.413251][  T673]  filemap_add_folio+0x6b/0x150
[  571.418090][  T673]  __filemap_get_folio+0x4c4/0x690
[  571.423317][  T673]  pagecache_get_page+0x26/0xe0
[  571.428168][  T673]  grab_cache_page_write_begin+0x3f/0x50
[  571.433787][  T673]  cont_write_begin+0x4ab/0x7b0
[  571.438664][  T673]  fat_write_begin+0x61/0xf0
[  571.443322][  T673]  ? fat_block_truncate_page+0x30/0x30
[  571.448780][  T673]  generic_perform_write+0x1c8/0x400
[  571.454092][  T673]  __generic_file_write_iter+0x195/0x2b0
[  571.459707][  T673]  ? generic_write_checks+0x250/0x290
[  571.465065][  T673]  generic_file_write_iter+0x75/0x130
[  571.470421][  T673]  do_iter_readv_writev+0x2de/0x380
[  571.475697][  T673]  do_iter_write+0x192/0x5c0
[  571.480276][  T673]  ? splice_from_pipe_next+0x34f/0x3b0
[  571.485777][  T673]  ? kmalloc_array+0x2d/0x40
[  571.490359][  T673]  vfs_iter_write+0x4c/0x70
[  571.494882][  T673]  iter_file_splice_write+0x43a/0x790
[  571.500255][  T673]  ? splice_from_pipe+0xd0/0xd0
[  571.505106][  T673]  direct_splice_actor+0x80/0xa0
[  571.510044][  T673]  splice_direct_to_actor+0x345/0x650
[  571.515454][  T673]  ? do_splice_direct+0x190/0x190
[  571.520462][  T673]  do_splice_direct+0x106/0x190
[  571.525298][  T673]  do_sendfile+0x675/0xc40
[  571.529702][  T673]  __x64_sys_sendfile64+0x102/0x140
[  571.534938][  T673]  do_syscall_64+0x44/0xa0
[  571.539359][  T673]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  571.545241][  T673] RIP: 0033:0x7fac3ad25ae9
[  571.549655][  T673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  571.569312][  T673] RSP: 002b:00007fac38a9c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
00:09:31 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:31 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x8400fffffffa)

00:09:31 executing program 0:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6900)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  571.577708][  T673] RAX: ffffffffffffffda RBX: 00007fac3ae38f60 RCX: 00007fac3ad25ae9
[  571.585727][  T673] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
[  571.593690][  T673] RBP: 00007fac38a9c1d0 R08: 0000000000000000 R09: 0000000000000000
[  571.601642][  T673] R10: 00008400fffffffa R11: 0000000000000246 R12: 0000000000000002
[  571.609599][  T673] R13: 00007ffd54033e4f R14: 00007fac38a9c300 R15: 0000000000022000
[  571.617802][  T673]  </TASK>
00:09:31 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x0)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:31 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff080004002500282459801b", 0x39}], 0x1)

00:09:31 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa) (fail_nth: 30)

[  571.680336][  T679] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  571.746147][  T681] loop0: detected capacity change from 0 to 264192
[  571.789075][  T684] FAT-fs (loop1): bogus number of reserved sectors
[  571.795623][  T684] FAT-fs (loop1): Can't find a valid FAT filesystem
[  571.812703][  T686] loop2: detected capacity change from 0 to 264192
00:09:31 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff080004004800282459801b", 0x39}], 0x1)

00:09:31 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x8400fffffffa)

[  571.837644][  T687] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  571.906538][  T690] loop4: detected capacity change from 0 to 264192
[  571.917377][  T691] loop3: detected capacity change from 0 to 264192
[  571.965282][  T691] FAULT_INJECTION: forcing a failure.
[  571.965282][  T691] name failslab, interval 1, probability 0, space 0, times 0
[  571.977998][  T691] CPU: 0 PID: 691 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0
[  571.986247][  T691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  571.996302][  T691] Call Trace:
[  571.999576][  T691]  <TASK>
[  572.002499][  T691]  dump_stack_lvl+0xd6/0x122
[  572.007097][  T691]  dump_stack+0x11/0x1b
[  572.011252][  T691]  should_fail+0x23c/0x250
00:09:32 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(0xffffffffffffffff, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  572.015703][  T691]  ? fat_cache_add+0x1f7/0x4f0
[  572.020506][  T691]  __should_failslab+0x81/0x90
[  572.025308][  T691]  should_failslab+0x5/0x20
[  572.029863][  T691]  kmem_cache_alloc+0x4f/0x320
[  572.034632][  T691]  fat_cache_add+0x1f7/0x4f0
[  572.039226][  T691]  fat_get_cluster+0x5ca/0x890
[  572.044000][  T691]  fat_get_mapped_cluster+0xe0/0x260
[  572.049302][  T691]  fat_bmap+0x258/0x290
[  572.053457][  T691]  fat_get_block+0x3cb/0x610
[  572.058053][  T691]  __block_write_begin_int+0x4c5/0x1010
[  572.063605][  T691]  ? fat_block_truncate_page+0x30/0x30
[  572.069330][  T691]  cont_write_begin+0x4cf/0x7b0
[  572.074187][  T691]  fat_write_begin+0x61/0xf0
[  572.078784][  T691]  ? fat_block_truncate_page+0x30/0x30
[  572.084284][  T691]  generic_perform_write+0x1c8/0x400
[  572.089834][  T691]  __generic_file_write_iter+0x195/0x2b0
[  572.095511][  T691]  ? generic_write_checks+0x250/0x290
[  572.101027][  T691]  generic_file_write_iter+0x75/0x130
[  572.106401][  T691]  do_iter_readv_writev+0x2de/0x380
[  572.111644][  T691]  do_iter_write+0x192/0x5c0
[  572.116304][  T691]  ? splice_from_pipe_next+0x34f/0x3b0
[  572.121840][  T691]  ? kmalloc_array+0x2d/0x40
[  572.126433][  T691]  vfs_iter_write+0x4c/0x70
[  572.130934][  T691]  iter_file_splice_write+0x43a/0x790
[  572.136338][  T691]  ? splice_from_pipe+0xd0/0xd0
[  572.141227][  T691]  direct_splice_actor+0x80/0xa0
[  572.146230][  T691]  splice_direct_to_actor+0x345/0x650
[  572.151612][  T691]  ? do_splice_direct+0x190/0x190
[  572.156737][  T691]  do_splice_direct+0x106/0x190
[  572.161585][  T691]  do_sendfile+0x675/0xc40
00:09:32 executing program 0:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:32 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff080004004c00282459801b", 0x39}], 0x1)

[  572.166001][  T691]  __x64_sys_sendfile64+0x102/0x140
[  572.171197][  T691]  do_syscall_64+0x44/0xa0
[  572.175686][  T691]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  572.181611][  T691] RIP: 0033:0x7fac3ad25ae9
[  572.186102][  T691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  572.205785][  T691] RSP: 002b:00007fac38a9c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  572.210256][  T795] loop2: detected capacity change from 0 to 264192
[  572.214184][  T691] RAX: ffffffffffffffda RBX: 00007fac3ae38f60 RCX: 00007fac3ad25ae9
[  572.214200][  T691] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
[  572.236653][  T691] RBP: 00007fac38a9c1d0 R08: 0000000000000000 R09: 0000000000000000
[  572.244625][  T691] R10: 00008400fffffffa R11: 0000000000000246 R12: 0000000000000002
[  572.252631][  T691] R13: 00007ffd54033e4f R14: 00007fac38a9c300 R15: 0000000000022000
[  572.260633][  T691]  </TASK>
00:09:32 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x8400fffffffa)

[  572.291548][  T797] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  572.401924][  T800] loop4: detected capacity change from 0 to 264192
[  572.415051][  T801] loop0: detected capacity change from 0 to 264192
[  572.494356][  T803] loop2: detected capacity change from 0 to 264192
00:09:32 executing program 1:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:32 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff080004006000282459801b", 0x39}], 0x1)

00:09:32 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa) (fail_nth: 31)

00:09:32 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(0xffffffffffffffff, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:32 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa)

00:09:32 executing program 0:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

00:09:32 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190010000500000007fd17e5ffff080004006800282459801b", 0x39}], 0x1)

[  572.676386][  T807] netlink: 'syz-executor.5': attribute type 16 has an invalid length.
[  572.696175][  T809] loop3: detected capacity change from 0 to 264192
[  572.699278][  T808] loop4: detected capacity change from 0 to 264192
[  572.731974][  T809] FAULT_INJECTION: forcing a failure.
[  572.731974][  T809] name failslab, interval 1, probability 0, space 0, times 0
[  572.744667][  T809] CPU: 1 PID: 809 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0
[  572.753065][  T809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  572.763114][  T809] Call Trace:
[  572.766374][  T809]  <TASK>
[  572.769285][  T809]  dump_stack_lvl+0xd6/0x122
[  572.773903][  T809]  dump_stack+0x11/0x1b
[  572.778049][  T809]  should_fail+0x23c/0x250
[  572.782455][  T809]  ? mempool_alloc_slab+0x16/0x20
[  572.787491][  T809]  __should_failslab+0x81/0x90
[  572.792290][  T809]  should_failslab+0x5/0x20
[  572.796774][  T809]  kmem_cache_alloc+0x4f/0x320
[  572.801532][  T809]  mempool_alloc_slab+0x16/0x20
[  572.806366][  T809]  ? mempool_free+0x130/0x130
[  572.811023][  T809]  mempool_alloc+0x9d/0x310
[  572.815579][  T809]  ? xas_load+0x284/0x2a0
[  572.820025][  T809]  bio_alloc_bioset+0xcc/0x560
[  572.824806][  T809]  ? find_get_pages_range+0x305/0x350
[  572.830167][  T809]  __mpage_writepage+0x9eb/0x1060
[  572.835292][  T809]  write_cache_pages+0x454/0x7f0
[  572.840294][  T809]  ? mpage_writepages+0x130/0x130
[  572.845365][  T809]  ? fat_block_truncate_page+0x30/0x30
[  572.850883][  T809]  mpage_writepages+0x7f/0x130
[  572.855670][  T809]  ? fat_block_truncate_page+0x30/0x30
[  572.861200][  T809]  ? fat_readpage+0x20/0x20
[  572.865691][  T809]  fat_writepages+0x20/0x30
[  572.870215][  T809]  do_writepages+0x1cb/0x330
[  572.874849][  T809]  ? generic_perform_write+0x397/0x400
[  572.880316][  T809]  filemap_write_and_wait_range+0x1b2/0x340
[  572.886197][  T809]  __generic_file_write_iter+0x1c5/0x2b0
[  572.891873][  T809]  generic_file_write_iter+0x75/0x130
[  572.897292][  T809]  do_iter_readv_writev+0x2de/0x380
[  572.902500][  T809]  do_iter_write+0x192/0x5c0
[  572.907128][  T809]  ? splice_from_pipe_next+0x34f/0x3b0
[  572.912564][  T809]  ? kmalloc_array+0x2d/0x40
[  572.917176][  T809]  vfs_iter_write+0x4c/0x70
[  572.921685][  T809]  iter_file_splice_write+0x43a/0x790
[  572.927083][  T809]  ? splice_from_pipe+0xd0/0xd0
[  572.931963][  T809]  direct_splice_actor+0x80/0xa0
[  572.936879][  T809]  splice_direct_to_actor+0x345/0x650
[  572.942228][  T809]  ? do_splice_direct+0x190/0x190
[  572.947243][  T809]  do_splice_direct+0x106/0x190
[  572.952076][  T809]  do_sendfile+0x675/0xc40
[  572.956474][  T809]  __x64_sys_sendfile64+0x102/0x140
[  572.961664][  T809]  do_syscall_64+0x44/0xa0
[  572.966122][  T809]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  572.971996][  T809] RIP: 0033:0x7fac3ad25ae9
[  572.976386][  T809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  572.995969][  T809] RSP: 002b:00007fac38a9c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  573.004361][  T809] RAX: ffffffffffffffda RBX: 00007fac3ae38f60 RCX: 00007fac3ad25ae9
[  573.012352][  T809] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
[  573.020431][  T809] RBP: 00007fac38a9c1d0 R08: 0000000000000000 R09: 0000000000000000
00:09:33 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x800)
lseek(0xffffffffffffffff, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa)

[  573.028391][  T809] R10: 00008400fffffffa R11: 0000000000000246 R12: 0000000000000002
[  573.036541][  T809] R13: 00007ffd54033e4f R14: 00007fac38a9c300 R15: 0000000000022000
[  573.044567][  T809]  </TASK>
[  573.054862][  T811] loop2: detected capacity change from 0 to 264192
00:09:33 executing program 3:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8400fffffffa) (fail_nth: 32)

00:09:33 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x100000000aea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6900)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa)