0x0, 0x0, 0x8, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000021000010700000000000000000a000000"], 0x14}}, 0x0) recvmsg(r1, 0x0, 0x2100) r2 = syz_io_uring_setup(0x2b2d, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000040)) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(0xffffffffffffffff, 0x8010661b, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x20100000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000000300)=0x10001) clone(0x52004400, &(0x7f0000000180)="08b5dfca315700ce487880a9c272d9875bb2e99ac5bc700ddda7c1a3b4e0010ed23c66d4d9", &(0x7f0000000280), &(0x7f0000000240), 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0xa29a2000) [ 65.672053][ T3352] ISOFS: Unable to identify CD-ROM format. [ 65.678477][ T3350] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 65.690219][ T3365] loop2: detected capacity change from 0 to 264192 [ 65.757065][ T3370] loop5: detected capacity change from 0 to 2 [ 65.781454][ T3365] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 65.801903][ T3362] device lo entered promiscuous mode 23:59:18 executing program 1: set_mempolicy(0x2, &(0x7f0000000080)=0x7851, 0x44) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/block/loop0', 0x800, 0x20) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) set_mempolicy(0x2, &(0x7f0000000280)=0xff, 0x5) sendmmsg$inet6(r0, &(0x7f00000015c0), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x10}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2200c001, &(0x7f0000b63fe4)={0xa, 0x2, 0x10001, @loopback}, 0x1c) socket$inet6(0xa, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) sendto$inet6(r3, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) shutdown(r3, 0x2) splice(r3, 0x0, r2, 0x0, 0x6f401, 0x0) [ 65.822268][ T3350] loop4: detected capacity change from 0 to 174 [ 65.855505][ T3350] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal 23:59:18 executing program 4: set_mempolicy(0x1, &(0x7f0000000180)=0x67, 0x5) set_mempolicy(0x1, &(0x7f0000000000)=0x2, 0x0) r0 = clone3(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {0x0, 0x0, 0xaee1}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@data_journal}]}) clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[r0], 0x1}, 0x58) 23:59:18 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x1, &(0x7f0000000000)=0x400000000000003f, 0x8) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) [ 66.038879][ T3391] loop4: detected capacity change from 0 to 174 23:59:18 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000280), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r3) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)={0x3c, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x14}, @NLBL_CIPSOV4_A_MLSCATLST={0x4, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x3c}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xdbda4804f3790724}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x140, r4, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x12c, 0x8, 0x0, 0x1, [{0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12abafc6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2af73ede}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x55}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79770edf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5126ef13}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xec}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xddc1e92}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x573affc2}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaf}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2e6e346d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x16}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2e5f3866}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f8a8587}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x15d9a31c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xb2fcb5e}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x20}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5b5f0ca5}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x16fe3e39}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x586a5afe}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb3}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d55cf93}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xed}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4fced5fb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x697489bd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8}]}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x1}, 0x4000051) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000004000880080002000100000008000100000000003400048005"], 0x5c}}, 0x0) [ 66.095488][ T3391] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 66.150367][ T3400] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 23:59:18 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="8771e6bf00f208fc9153a39062b9319861db6d35144c", 0x16) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) 23:59:18 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x1, &(0x7f0000000000)=0x400000000000003f, 0x8) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) 23:59:18 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, @in_args={0x4}}, './file0\x00'}) write$cgroup_subtree(r1, &(0x7f0000000380)={[{0x2b, 'blkio'}, {0x2d, 'blkio'}, {0x2d, 'blkio'}, {0x2b, 'blkio'}, {0x2d, 'cpuacct'}, {0x2d, 'perf_event'}, {0x2b, 'rdma'}, {0x2b, 'devices'}, {0x2b, 'rlimit'}]}, 0x48) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f00000002c0), 0x2, 0x0) rmdir(&(0x7f00000001c0)='./file0\x00') 23:59:18 executing program 3: openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x12083, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write$rfkill(r0, &(0x7f0000000040)={0x400}, 0x8) 23:59:18 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='init_itHElg,\x00']) 23:59:18 executing program 5: perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa8727b0b328b0507, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83600, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000340)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c009da2225cb2e13dd248f09f193c10543be9911bfde5bc1a1e8bf49b9f268a1d0fada302170e1f08ac51e3698c2cabc5f3d87f0e2617622969e835b555e86ecdf6723ba131653e9dbde977ad88c2b84b2ded"]) r1 = signalfd(r0, &(0x7f00000002c0)={[0x3ff]}, 0x8) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x0, 0x8, 0x9, 0x50, 0x0, 0x1, 0x8010, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_config_ext={0x9}, 0x41108, 0x2, 0x4, 0x9, 0x9, 0x101, 0xfc, 0x0, 0x4}, 0xffffffffffffffff, 0xa, r1, 0x0) r2 = getpid() r3 = signalfd4(r0, &(0x7f0000000300)={[0x1ff]}, 0x8, 0x800) sched_getscheduler(r2) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='gid_map\x00') r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup2(r5, r4) getsockopt$IP6T_SO_GET_INFO(r4, 0x29, 0x40, &(0x7f0000000000)={'mangle\x00', 0x0, [], '\x00', 0x0, 0x6000000}, &(0x7f0000000180)=0x54) r6 = openat$incfs(r3, &(0x7f00000003c0)='.pending_reads\x00', 0x600100, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r6, 0x80489439, &(0x7f0000000400)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x9, 0x7f, 0x0, 0x1, 0x0, 0x8, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000080), 0x52e74ca4ba8ef843}, 0x10188, 0x6, 0x4, 0x2, 0x7f, 0x10000, 0x98e, 0x0, 0x7, 0x0, 0x7}, r2, 0x1, r4, 0x2) 23:59:18 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x3, &(0x7f0000000000)=[{0x15, 0x0, 0x1}, {0x20, 0x0, 0x0, 0x40000}, {0x6, 0x0, 0x0, 0x7fff7ffa}]}) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) 23:59:18 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x1, &(0x7f0000000000)=0x400000000000003f, 0x8) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) [ 66.606395][ T3409] loop4: detected capacity change from 0 to 4 [ 66.633987][ T3409] EXT4-fs (loop4): Unrecognized mount option "init_itHElg" or missing value [ 66.649729][ T3415] loop5: detected capacity change from 0 to 1051 23:59:19 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/40, 0x28}], 0x1, 0x7f, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x80000000, 0xfb2b}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000100)={{0x7, 0x1}, 'port0\x00', 0x80, 0x40019, 0x404, 0x5, 0x40, 0x1, 0x80000000, 0x0, 0x4, 0x83}) 23:59:19 executing program 1: prctl$PR_SET_NAME(0xf, &(0x7f00000000c0)='/proc/meminfo\x00') openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='gid_map\x00') dup2(0xffffffffffffffff, r0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000000)={'mangle\x00', 0x0, [], '\x00', 0x0, 0x6000000}, &(0x7f0000000180)=0x54) read$char_usb(r0, &(0x7f00000001c0)=""/123, 0x52) [ 66.671315][ T3420] loop2: detected capacity change from 0 to 264192 [ 66.678235][ T3415] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 66.694101][ T3409] loop4: detected capacity change from 0 to 4 [ 66.709362][ T3409] EXT4-fs (loop4): Unrecognized mount option "init_itHElg" or missing value [ 66.737472][ T3415] EXT4-fs (loop5): orphan cleanup on readonly fs [ 66.762893][ T3420] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 66.793537][ T3415] EXT4-fs error (device loop5): __ext4_iget:4792: inode #3: block 4: comm syz-executor.5: invalid block [ 66.844826][ T3415] EXT4-fs (loop5): Remounting filesystem read-only [ 66.851466][ T3415] EXT4-fs error (device loop5): ext4_quota_enable:6315: comm syz-executor.5: Bad quota inode # 3 23:59:19 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r3 = socket(0x10, 0x803, 0x0) write(r3, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r3, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) tkill(r0, 0x17) r4 = gettid() wait4(r4, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) tkill(r0, 0x2a) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000440)={0x0, "fc728e32cad97b1304edf3ad20361a2d"}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={0x0, 0x8, 0x1, [0x7f, 0x628f, 0x10001, 0x1, 0x2], [0x4, 0x81, 0x7, 0xfffffffffffffffe, 0x1, 0x4fc6, 0x7, 0x7ff, 0x1, 0x7, 0x7, 0x5, 0x6d5d202d, 0x9, 0x80000001, 0x4, 0x8, 0x5, 0x10100000, 0xfa, 0x20, 0x4, 0x81, 0x69ab, 0x401, 0x3, 0x7, 0x43, 0xffffffff, 0xb14, 0x8, 0x1000000000, 0x4, 0x3, 0x3ff, 0x8, 0x5, 0x4, 0x8, 0xe2, 0x1000, 0x9, 0x4, 0x9, 0x5, 0x8, 0x6, 0x6, 0xe3, 0x6, 0x163451fd, 0xe0, 0x2, 0x2, 0xfffffffffffffff8, 0x8, 0x10000, 0x4, 0x3, 0x2, 0x2, 0x40, 0x8, 0xfffffffffffff8f1, 0x5, 0xeda, 0x10000, 0x4, 0x10001, 0x9, 0x2, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0x5, 0x80, 0x8e2, 0x80000000, 0x1, 0x5, 0x6, 0x7, 0x7, 0x6, 0x4, 0x9, 0x2, 0xb37, 0x159, 0x1000, 0x1, 0x10000, 0x800, 0xb56, 0x7ff, 0xdb, 0x0, 0x10000, 0xfffffffffffffffb, 0x8, 0x1000, 0x8, 0x7, 0x4, 0x3, 0x5, 0x2, 0x7fffffff, 0x8, 0x4, 0x2, 0x7, 0x5, 0xffffffff, 0x7, 0x7, 0x100000001, 0x1000000009, 0x3, 0x7]}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000004c0)={0x7, 0x1, {0x101, @usage=0x5, 0x0, 0x3, 0xb2e, 0x4, 0x85c7, 0x6, 0x0, @usage, 0x1ff, 0x3, [0x1, 0x4, 0x1, 0xb9, 0x1f, 0x5]}, {0x6, @usage=0x7, 0x0, 0x4, 0x3, 0x6, 0x3, 0x1, 0x494, @struct={0x3, 0x8f}, 0x97c, 0x6, [0x1ff, 0xfffffffffffffbff, 0x9bc4, 0x401, 0x8, 0x4]}, {0x1f, @usage=0x7f, 0x0, 0xfffffffffffffffc, 0x0, 0x180000000000, 0x4, 0x2, 0x10, @struct={0x6, 0x60fb}, 0x80000000, 0x101, [0x7fffffff, 0x4, 0x800, 0x12f2, 0x3ff, 0x800]}, {0x401, 0x2}}) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000600)={0x0, 0x3ff, 0x9, 0x1}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:19 executing program 4: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_setup(0x400, &(0x7f0000004500)=0x0) write$P9_RLERRORu(r0, &(0x7f0000000080)={0xd}, 0xd) write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000180)={0x4a, 0x7d, 0x1, {0x0, 0x43, 0x1f, 0xfffffe00, {0x0, 0x3, 0x8}, 0x10000, 0x7, 0xdc7, 0x0, 0x3, '\'(:', 0x1, '-', 0x5, 'rfdno', 0x7, '+%{&*+@'}}, 0x4a) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='gid_map\x00') r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup2(r3, r2) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000000)={'mangle\x00', 0x0, [], '\x00', 0x0, 0x6000000}, &(0x7f0000000180)=0x54) r4 = accept$unix(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000002c0)=0x6e) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x9, r0, 0x0, 0x0, 0x100000004}]) [ 66.883044][ T3415] EXT4-fs warning (device loop5): ext4_enable_quotas:6355: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 66.897084][ T3415] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 66.903820][ T3415] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. 23:59:19 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="8771e6bf00f208fc9153a39062b9319861db6d35144c", 0x16) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) 23:59:19 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0xfffd, 0x0, 0x0, 0x8002, 0x0, "af1e724506346d9f"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x16) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)) 23:59:19 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x20000) read(r0, &(0x7f0000000500)=""/248, 0xf8) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0x5}) r2 = fork() r3 = fcntl$getown(r0, 0x9) sched_setattr(r3, &(0x7f0000000080)={0x38, 0x1, 0x7, 0x3, 0xfffffffb, 0x7fffffff, 0x9, 0x100000001, 0xd06}, 0x0) ioprio_set$pid(0x1, r1, 0x2000) tkill(r2, 0x19) 23:59:19 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r3 = socket(0x10, 0x803, 0x0) write(r3, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r3, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) tkill(r0, 0x17) r4 = gettid() wait4(r4, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) tkill(r0, 0x2a) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000440)={0x0, "fc728e32cad97b1304edf3ad20361a2d"}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={0x0, 0x8, 0x1, [0x7f, 0x628f, 0x10001, 0x1, 0x2], [0x4, 0x81, 0x7, 0xfffffffffffffffe, 0x1, 0x4fc6, 0x7, 0x7ff, 0x1, 0x7, 0x7, 0x5, 0x6d5d202d, 0x9, 0x80000001, 0x4, 0x8, 0x5, 0x10100000, 0xfa, 0x20, 0x4, 0x81, 0x69ab, 0x401, 0x3, 0x7, 0x43, 0xffffffff, 0xb14, 0x8, 0x1000000000, 0x4, 0x3, 0x3ff, 0x8, 0x5, 0x4, 0x8, 0xe2, 0x1000, 0x9, 0x4, 0x9, 0x5, 0x8, 0x6, 0x6, 0xe3, 0x6, 0x163451fd, 0xe0, 0x2, 0x2, 0xfffffffffffffff8, 0x8, 0x10000, 0x4, 0x3, 0x2, 0x2, 0x40, 0x8, 0xfffffffffffff8f1, 0x5, 0xeda, 0x10000, 0x4, 0x10001, 0x9, 0x2, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0x5, 0x80, 0x8e2, 0x80000000, 0x1, 0x5, 0x6, 0x7, 0x7, 0x6, 0x4, 0x9, 0x2, 0xb37, 0x159, 0x1000, 0x1, 0x10000, 0x800, 0xb56, 0x7ff, 0xdb, 0x0, 0x10000, 0xfffffffffffffffb, 0x8, 0x1000, 0x8, 0x7, 0x4, 0x3, 0x5, 0x2, 0x7fffffff, 0x8, 0x4, 0x2, 0x7, 0x5, 0xffffffff, 0x7, 0x7, 0x100000001, 0x1000000009, 0x3, 0x7]}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000004c0)={0x7, 0x1, {0x101, @usage=0x5, 0x0, 0x3, 0xb2e, 0x4, 0x85c7, 0x6, 0x0, @usage, 0x1ff, 0x3, [0x1, 0x4, 0x1, 0xb9, 0x1f, 0x5]}, {0x6, @usage=0x7, 0x0, 0x4, 0x3, 0x6, 0x3, 0x1, 0x494, @struct={0x3, 0x8f}, 0x97c, 0x6, [0x1ff, 0xfffffffffffffbff, 0x9bc4, 0x401, 0x8, 0x4]}, {0x1f, @usage=0x7f, 0x0, 0xfffffffffffffffc, 0x0, 0x180000000000, 0x4, 0x2, 0x10, @struct={0x6, 0x60fb}, 0x80000000, 0x101, [0x7fffffff, 0x4, 0x800, 0x12f2, 0x3ff, 0x800]}, {0x401, 0x2}}) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000600)={0x0, 0x3ff, 0x9, 0x1}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:19 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000100)={@multicast2, @local, @multicast2}, 0xc) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000001000)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x38020}, 0xc, &(0x7f0000000440)={&(0x7f0000000840)=ANY=[@ANYBLOB="f181515713b1623ae2a8b7009479613b72d4b4c3a6c9bddc0000e83126214e8de967292af23abf0e90502f7c820e06ea2acb2caf9ecefc2701c4786b4df424351d12b402989123b2f11b02ddde015303235d305b27c283b5f92b1593cf", @ANYRES16=0x0, @ANYBLOB="000427bd7000ffdbdf251100", @ANYBLOB="08003c000010000009002900c1fdc4855f95d201000000080003fdd501695e", @ANYRESOCT, @ANYBLOB="00003cf600000000004e76401500bfd169cfb149642d64844cd3b7467c93b8358782e8c595afd7402ab2d023c111ddf0ac56458f8b8a073589fb29d1dd0a0f8d3e83e5bdcb9e16bbef0f1fbbda"], 0x44}, 0x1, 0x0, 0x0, 0x24000885}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, 0x0, 0x20000004) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="80030000", @ANYRES16=0x0], 0x180}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000a80)={0x188, 0x0, 0x1, 0x70bd29, 0x0, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x7fff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x8}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6, 0x11, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xff}, {0x6, 0x11, 0x7434}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x101}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x8}}]}, 0x188}, 0x1, 0x0, 0x0, 0x8000}, 0x4044810) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="2c7766646e6f3dd091b91bf13ecd9bc4c6abff2341eccebc7bad482502450c", @ANYRESHEX=r3, @ANYBLOB=',afid=0x0000000000008001,version=9p2000.u,access=', @ANYRESDEC=0xee00, @ANYBLOB=',version=9p2000.L,cachetag=wfdno,loose,dfltuid=', @ANYRESHEX=0x0, @ANYBLOB="2c706f73697861636c2c00125981899135947775f87630c91852eaf5ebc7329032b8337d8dbdd962871ff5180d0ee3499a34a5efdc17c469bd1f661bd4be6ca4e92c67542496c6966f38aba48b3cc44a85b36e8264c90617439070c27c9a09818b97e8aeb2bc0624c20fdfc6aa5c59174e33ad9e19963a698686b8f6dcea073779fd87c06c50706f1f1f53d4893044c3239184d695b1a7758c2e33ae81f3067502c5b76d8cdce3a33e3f2d6ca67704"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net\x00') lseek(r4, 0x0, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x26, &(0x7f0000000480)={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}, 0xc) clone(0x2000000, &(0x7f00000005c0)="8afa1d81c6d3cb48ed2400dbef65f5a98af686103b111061193faa06d8e28f62bb4cbb6c7503ea2afefb47934bc3287db6db7a782c34a07f7dca206d5b8e1881d52b5091eb86b7863bd8d256e2f33344a86f67e750911a8f77cb1fd928c5a8035428a237074520b16b8ee37847446131c5d29eaf02896470ec3c78494dfb7a76a0dcad2808f5b166a99f587e5f381b1c581fe27e0f41f2198147b74b9274b46c08132f2d199488722f7369be3ff11924c094fea3190e866c753235be29bee41dfc54d5474a5ce5743abdd450af5e1b14a68afa84e0752da88b6f4a41254ffe", &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000480)) 23:59:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) connect$netlink(r0, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f00000004c0)={&(0x7f0000000280), 0xc, &(0x7f0000000480)={&(0x7f00000002c0)={0x14, r1, 0x9}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r7 = socket(0x2a, 0x800, 0xa3b) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r10}}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="1cc7ff000f8049b53cbf95b9fb65db44ae72628f76376942c7c085e2d9b02a5fc29c864898e4c35dc28fe3884dc4444373d840590e3772bd2c23223c9714347c62355aa6db2e21627227d32934163e5b49e6d02ea82b694b55f11a6c4115d5", @ANYRES16=r11, @ANYBLOB="010e00000000001daede852656d375aee90044db2ccd6e31cdc5d8b06f3a2bf9a0a82124ab6add543037e234d0a1f9edcef7e85e4e008c73f4890adac8789b2a18c7ec1472eba5d035612d", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000600), 0xc, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="000227bd7000fddbdf250600000008000300", @ANYRES32=r12, @ANYBLOB="0c010000000a0018000303030303030000080005000b00000005005300000000000a00180003030303030300000800050008ddff005e6a42e2c1a9c615674dcb846fe2a9622602249954b8814f8b3fd1d641974802f59d5a4f908a8c1eac90087420587bca12bad77b8898501bd07b6cced8e3520eb6ddb2e58ed2e67099e9a7a9c61c0136069aba99bcbc698cedecf2afd5858e302996ae24f29eb8375543af87927c12a2d231f7b88b56b36c5bd3bcb035909d51a776022461170000000000"], 0x58}}, 0x20000010) sendmsg$NL80211_CMD_GET_STATION(r7, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x12c, r8, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xfe, 0xbe, "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"}]}, 0x12c}, 0x1, 0x0, 0x0, 0x20040004}, 0x8014) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@local, @ipv4={'\x00', '\xff\xff', @remote}, @dev, 0x0, 0x6, 0xb, 0x0, 0x0, 0x0, r6}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000084}, 0x2004c080) [ 67.605239][ T3446] 9pnet: Insufficient options for proto=fd 23:59:19 executing program 4: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000500)={0xe, 0x7, 0x0, {{0xffffffffffffff3c, 'E'}, 0x80}}, 0xe) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xc0081) r4 = dup(r3) dup(r4) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='children\x00') writev(r5, &(0x7f0000000200)=[{&(0x7f0000000140)="96321c73c984a77130853b2a8e3bc5404f774e27b629eeabac03e10e4eb782111060d8a65647714c5b10d7968c71e86735e4d39e9dc7ca955f2bcf811a04dc76b10fd69a75918b7cda905e16ab87cd053cfd99cf79538db9a24c28f1435ae89c089a335822cc8435d2bdafa441ad721fea3135815c99b5fd4fa969da2ca6ca84df1bc2aaff506001b4f1d8377485dd66b2f864e3758d997121f422ed9e77a88d09865dff190b52cb", 0xa8}], 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7766646e6f3d136d97b09728973cbf92ee9e89c044060e678e7981fbbca65f7d68259c66de2417c857b9529a3fccac31426a6e02ab993330a1e6776c01c8d85c68d9d35eeeb53a1217c5e67475dd16b41cae172d120b9ed4b7006dfa1550444f12b88567b2a8ae11466b0d30c2503f7e8644db7eeeb141b4d336ded024a632924f4fa31b5d167ae8985897d42a84147d9bc9f6d93f6dbd57cf0b46121ff09af56da378357b760031828d60f9f4f91d6e2e1598c1283530c0fb5c8e2feaf35d03369e738becb574675f7e87cc29d890c10c80331f357b73be585852a727a02452e8076f400fc611", @ANYRESHEX=r4, @ANYBLOB="4d6a5c1f6a6b3df5aeee482e2b25b7f4498f467ac5815518be406a7845b0bc5bb77617d4a0d3e7fd001f5bfafc9628f33b60d1d46df8974008072455a3a555eadee0eceb2a7e58e15832e7f342ca523745b8d82013827793ddbc6049390c07cbaae15d7f9b03b8fbdca3c0f6"]) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000440)={0x2, 0x3ff, 0x1, 'queue0\x00', 0x3}) [ 67.645742][ T3446] 9pnet: Insufficient options for proto=fd [ 67.664426][ T3461] loop2: detected capacity change from 0 to 264192 [ 67.686788][ T3461] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 23:59:20 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r3 = socket(0x10, 0x803, 0x0) write(r3, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r3, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) tkill(r0, 0x17) r4 = gettid() wait4(r4, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) tkill(r0, 0x2a) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000440)={0x0, "fc728e32cad97b1304edf3ad20361a2d"}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={0x0, 0x8, 0x1, [0x7f, 0x628f, 0x10001, 0x1, 0x2], [0x4, 0x81, 0x7, 0xfffffffffffffffe, 0x1, 0x4fc6, 0x7, 0x7ff, 0x1, 0x7, 0x7, 0x5, 0x6d5d202d, 0x9, 0x80000001, 0x4, 0x8, 0x5, 0x10100000, 0xfa, 0x20, 0x4, 0x81, 0x69ab, 0x401, 0x3, 0x7, 0x43, 0xffffffff, 0xb14, 0x8, 0x1000000000, 0x4, 0x3, 0x3ff, 0x8, 0x5, 0x4, 0x8, 0xe2, 0x1000, 0x9, 0x4, 0x9, 0x5, 0x8, 0x6, 0x6, 0xe3, 0x6, 0x163451fd, 0xe0, 0x2, 0x2, 0xfffffffffffffff8, 0x8, 0x10000, 0x4, 0x3, 0x2, 0x2, 0x40, 0x8, 0xfffffffffffff8f1, 0x5, 0xeda, 0x10000, 0x4, 0x10001, 0x9, 0x2, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0x5, 0x80, 0x8e2, 0x80000000, 0x1, 0x5, 0x6, 0x7, 0x7, 0x6, 0x4, 0x9, 0x2, 0xb37, 0x159, 0x1000, 0x1, 0x10000, 0x800, 0xb56, 0x7ff, 0xdb, 0x0, 0x10000, 0xfffffffffffffffb, 0x8, 0x1000, 0x8, 0x7, 0x4, 0x3, 0x5, 0x2, 0x7fffffff, 0x8, 0x4, 0x2, 0x7, 0x5, 0xffffffff, 0x7, 0x7, 0x100000001, 0x1000000009, 0x3, 0x7]}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000004c0)={0x7, 0x1, {0x101, @usage=0x5, 0x0, 0x3, 0xb2e, 0x4, 0x85c7, 0x6, 0x0, @usage, 0x1ff, 0x3, [0x1, 0x4, 0x1, 0xb9, 0x1f, 0x5]}, {0x6, @usage=0x7, 0x0, 0x4, 0x3, 0x6, 0x3, 0x1, 0x494, @struct={0x3, 0x8f}, 0x97c, 0x6, [0x1ff, 0xfffffffffffffbff, 0x9bc4, 0x401, 0x8, 0x4]}, {0x1f, @usage=0x7f, 0x0, 0xfffffffffffffffc, 0x0, 0x180000000000, 0x4, 0x2, 0x10, @struct={0x6, 0x60fb}, 0x80000000, 0x101, [0x7fffffff, 0x4, 0x800, 0x12f2, 0x3ff, 0x800]}, {0x401, 0x2}}) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000600)={0x0, 0x3ff, 0x9, 0x1}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 67.742050][ T3467] 9pnet: Insufficient options for proto=fd [ 67.791858][ T3471] 9pnet: Insufficient options for proto=fd 23:59:20 executing program 4: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x3, &(0x7f0000000040)=[{0x35}, {0x5c}, {0x1006, 0x0, 0x0, 0x7fff8002}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000080)) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) 23:59:20 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r3 = socket(0x10, 0x803, 0x0) write(r3, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r3, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) tkill(r0, 0x17) r4 = gettid() wait4(r4, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) tkill(r0, 0x2a) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000440)={0x0, "fc728e32cad97b1304edf3ad20361a2d"}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={0x0, 0x8, 0x1, [0x7f, 0x628f, 0x10001, 0x1, 0x2], [0x4, 0x81, 0x7, 0xfffffffffffffffe, 0x1, 0x4fc6, 0x7, 0x7ff, 0x1, 0x7, 0x7, 0x5, 0x6d5d202d, 0x9, 0x80000001, 0x4, 0x8, 0x5, 0x10100000, 0xfa, 0x20, 0x4, 0x81, 0x69ab, 0x401, 0x3, 0x7, 0x43, 0xffffffff, 0xb14, 0x8, 0x1000000000, 0x4, 0x3, 0x3ff, 0x8, 0x5, 0x4, 0x8, 0xe2, 0x1000, 0x9, 0x4, 0x9, 0x5, 0x8, 0x6, 0x6, 0xe3, 0x6, 0x163451fd, 0xe0, 0x2, 0x2, 0xfffffffffffffff8, 0x8, 0x10000, 0x4, 0x3, 0x2, 0x2, 0x40, 0x8, 0xfffffffffffff8f1, 0x5, 0xeda, 0x10000, 0x4, 0x10001, 0x9, 0x2, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0x5, 0x80, 0x8e2, 0x80000000, 0x1, 0x5, 0x6, 0x7, 0x7, 0x6, 0x4, 0x9, 0x2, 0xb37, 0x159, 0x1000, 0x1, 0x10000, 0x800, 0xb56, 0x7ff, 0xdb, 0x0, 0x10000, 0xfffffffffffffffb, 0x8, 0x1000, 0x8, 0x7, 0x4, 0x3, 0x5, 0x2, 0x7fffffff, 0x8, 0x4, 0x2, 0x7, 0x5, 0xffffffff, 0x7, 0x7, 0x100000001, 0x1000000009, 0x3, 0x7]}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000004c0)={0x7, 0x1, {0x101, @usage=0x5, 0x0, 0x3, 0xb2e, 0x4, 0x85c7, 0x6, 0x0, @usage, 0x1ff, 0x3, [0x1, 0x4, 0x1, 0xb9, 0x1f, 0x5]}, {0x6, @usage=0x7, 0x0, 0x4, 0x3, 0x6, 0x3, 0x1, 0x494, @struct={0x3, 0x8f}, 0x97c, 0x6, [0x1ff, 0xfffffffffffffbff, 0x9bc4, 0x401, 0x8, 0x4]}, {0x1f, @usage=0x7f, 0x0, 0xfffffffffffffffc, 0x0, 0x180000000000, 0x4, 0x2, 0x10, @struct={0x6, 0x60fb}, 0x80000000, 0x101, [0x7fffffff, 0x4, 0x800, 0x12f2, 0x3ff, 0x800]}, {0x401, 0x2}}) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000600)={0x0, 0x3ff, 0x9, 0x1}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:20 executing program 4: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x73) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0}, {0x0}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {}, {}, {0x0}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {0x0, 0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0}, {}, {0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {0x0}, {}, {0x0}, {0x0, 0x0}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000440)=ANY=[@ANYRES64=0x0, @ANYBLOB="0c000000000000000400000000000000010000000000000059720000e1ffffff080000000000000003000000000000000300000004000000ffff00000900000000020000000000000000e1ffffffffffff000000000000000400000000000000200000000000000000000000000000000000000000000000000000000000000000000460af24715ae95d88f49fce04e25c46616f90babacc52acc8eda2f951e81e83f515f1eb16bc4c049566b7b0b9a9144197a3ebb5001aed7226837ceadcc016fe4df3601454eece62c90112be7a10b98091f9a3467022be454f1bdfcb756acbb5255823980a83a388a6e0f1fdacde777b44a1caca00"/261]) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000053b00)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) r110 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r110, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {0x0}, {r58, 0x0}, {0x0, 0x0}, {}, {}, {0x0}, {}, {}, {0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {r30}, {0x0, 0x0}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0}, {}, {}, {}, {}, {0x0, 0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0}, {0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0}, {0x0, 0x0}, {}, {0x0}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {0x0, 0x0}, {r22}, {}, {0x0, 0x0}, {}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005fc40)={0x7, [{0x0, r57}, {0x0, r10}, {}, {0x0, r73}, {0x0, r128}, {}, {}, {}, {r36}, {}, {0x0, r172}, {}, {r176, r33}, {}, {}, {r130, r169}, {0x0, r150}, {r26, r23}, {r61}, {0x0, r125}, {0x0, r191}, {r114}, {0x0, r174}, {r118}, {r4}, {0x0, r82}, {}, {0x0, r46}, {}, {}, {}, {r109, r6}, {0x0, r137}, {}, {0x0, r179}, {r177, r119}, {r138}, {0x0, r9}, {0x0, r8}, {r176}, {}, {r111, r14}, {r35, r152}, {r37}, {r156}, {r184, r3}, {r20, r180}, {r62}, {0x0, r173}, {0x0, r116}, {r167, r112}, {r187, r29}, {r166}, {}, {0x0, r100}, {r2}, {}, {0x0, r103}, {r105, r75}, {r76}, {}, {r114}, {r72}, {r192}, {r89, r196}, {r142, r163}, {0x0, r120}, {r182}, {}, {r7, r27}, {}, {0x0, r179}, {}, {}, {r161, r181}, {r80}, {r158}, {}, {0x0, r139}, {r121}, {0x0, r48}, {}, {0x0, r145}, {}, {r41, r134}, {}, {r71}, {r28}, {}, {}, {r56}, {0x0, r127}, {0x0, r178}, {}, {r185}, {r115, r99}, {0x0, r81}, {}, {r140, r88}, {}, {}, {r162, r136}, {r195, r63}, {}, {0x0, r91}, {0x0, r159}, {r13}, {r164}, {r64}, {}, {r106}, {0x0, r11}, {}, {0x0, r153}, {r101}, {}, {r102}, {}, {}, {}, {}, {r194, r86}, {}, {r60}, {r168}, {r43}, {r83}, {}, {r98}, {}, {0x0, r78}, {}, {r154}, {}, {r107}, {0x0, r113}, {r66, r39}, {}, {r141, r33}, {}, {}, {r45, r47}, {0x0, r93}, {r171}, {}, {}, {0x0, r65}, {}, {0x0, r40}, {}, {}, {r32}, {}, {r117, r55}, {0x0, r155}, {}, {}, {r44}, {r135}, {}, {0x0, r68}, {r16}, {}, {r25}, {}, {r133, r34}, {r41}, {}, {}, {0x0, r70}, {r49, r180}, {0x0, r149}, {r92}, {r129}, {r168}, {r51}, {}, {r12, r193}, {r143, r77}, {}, {r146}, {r104}, {}, {0x0, r147}, {r144}, {}, {0x0, r85}, {}, {r16}, {}, {r126, r124}, {r175, r108}, {r45, r17}, {r79, r103}, {}, {r164, r50}, {r59}, {r123, r174}, {r97}, {0x0, r52}, {0x0, r69}, {0x0, r38}, {0x0, r24}, {0x0, r95}, {}, {0x0, r150}, {}, {0x0, r54}, {r22}, {}, {0x0, r5}, {r84}, {r53, r151}, {r132}, {}, {}, {}, {r94, r170}, {r21}, {r87, r67}, {r190, r189}, {0x0, r15}, {r188}, {0x0, r90}, {}, {r165}, {}, {}, {0x0, r148}, {}, {}, {}, {0x0, r17}, {}, {r96}, {0x0, r31}, {r188, r186}, {}, {0x0, r157}, {}, {}, {r42, r18}, {0x0, r131}, {r160}, {}, {}, {r122}, {r19}, {0x0, r183}, {}, {}, {}, {}, {}, {r74}], 0x1, "2225300ff82aee"}) close(r0) perf_event_open(&(0x7f00000002c0)={0x4, 0x80, 0x9, 0xb6, 0xff, 0x9, 0x0, 0xfffffffffffffffa, 0x8, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000280)}, 0x200, 0x7, 0x2, 0x5, 0x7, 0x1, 0x2, 0x0, 0x3, 0x0, 0x101}, 0x0, 0x4, 0xffffffffffffffff, 0x4) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)=[0x0, &(0x7f0000000100)='\xfc|\xf5\x13\xd4\xf6P\xc5]F\xc1Z\x87\xf0\x9b1\xaa\x8d\x7f\xfb;\xca\x8b\xc5s\xda\xde\xf1~\x9e\xe0$\x8d\x95\x80=l\x1d\x1db\xfb8MI\xd1\x140xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r2, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) tkill(r0, 0x17) r3 = gettid() wait4(r3, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) tkill(r0, 0x2a) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000440)={0x0, "fc728e32cad97b1304edf3ad20361a2d"}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={0x0, 0x8, 0x1, [0x7f, 0x628f, 0x10001, 0x1, 0x2], [0x4, 0x81, 0x7, 0xfffffffffffffffe, 0x1, 0x4fc6, 0x7, 0x7ff, 0x1, 0x7, 0x7, 0x5, 0x6d5d202d, 0x9, 0x80000001, 0x4, 0x8, 0x5, 0x10100000, 0xfa, 0x20, 0x4, 0x81, 0x69ab, 0x401, 0x3, 0x7, 0x43, 0xffffffff, 0xb14, 0x8, 0x1000000000, 0x4, 0x3, 0x3ff, 0x8, 0x5, 0x4, 0x8, 0xe2, 0x1000, 0x9, 0x4, 0x9, 0x5, 0x8, 0x6, 0x6, 0xe3, 0x6, 0x163451fd, 0xe0, 0x2, 0x2, 0xfffffffffffffff8, 0x8, 0x10000, 0x4, 0x3, 0x2, 0x2, 0x40, 0x8, 0xfffffffffffff8f1, 0x5, 0xeda, 0x10000, 0x4, 0x10001, 0x9, 0x2, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0x5, 0x80, 0x8e2, 0x80000000, 0x1, 0x5, 0x6, 0x7, 0x7, 0x6, 0x4, 0x9, 0x2, 0xb37, 0x159, 0x1000, 0x1, 0x10000, 0x800, 0xb56, 0x7ff, 0xdb, 0x0, 0x10000, 0xfffffffffffffffb, 0x8, 0x1000, 0x8, 0x7, 0x4, 0x3, 0x5, 0x2, 0x7fffffff, 0x8, 0x4, 0x2, 0x7, 0x5, 0xffffffff, 0x7, 0x7, 0x100000001, 0x1000000009, 0x3, 0x7]}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000004c0)={0x7, 0x1, {0x101, @usage=0x5, 0x0, 0x3, 0xb2e, 0x4, 0x85c7, 0x6, 0x0, @usage, 0x1ff, 0x3, [0x1, 0x4, 0x1, 0xb9, 0x1f, 0x5]}, {0x6, @usage=0x7, 0x0, 0x4, 0x3, 0x6, 0x3, 0x1, 0x494, @struct={0x3, 0x8f}, 0x97c, 0x6, [0x1ff, 0xfffffffffffffbff, 0x9bc4, 0x401, 0x8, 0x4]}, {0x1f, @usage=0x7f, 0x0, 0xfffffffffffffffc, 0x0, 0x180000000000, 0x4, 0x2, 0x10, @struct={0x6, 0x60fb}, 0x80000000, 0x101, [0x7fffffff, 0x4, 0x800, 0x12f2, 0x3ff, 0x800]}, {0x401, 0x2}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:20 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="8771e6bf00f208fc9153a39062b9319861db6d35144c", 0x16) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r3, r1, 0x0, 0xffffff04) 23:59:20 executing program 3: set_mempolicy(0x2, &(0x7f0000000040)=0x1f, 0x9) r0 = signalfd(0xffffffffffffffff, &(0x7f0000014340), 0x8) close_range(r0, 0xffffffffffffffff, 0x2) unshare(0x4a060480) 23:59:20 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x10) fallocate(r1, 0x0, 0x0, 0x2000402) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000057480)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000057680)={0x0, 0x0, "b9bcafc945d41c3f62d2ca0bdf1d5573a2a9c0eb9e077bc1133a7de16a866bcd3f3ee5d28f7de5097b0d9d832f626af2eaac56af27fc8ee94ac08f6b2ce0e4a11a5a1a4c1bd444a94dcb076251e39accea14a38072fed2554f22ffee7caf53f21b30fe0867d03b1d492188496a208e6938e964359c8ada9186931d96d65b616b365880b74feb6df70cd8564fdd8c0b88896f3a370073716c09234ed9dd8537178fae737f701e08e07165043428938b7fab0798ba7828db82bcbc2c1b470c4663e57d40de71fbabde13caa02393d51436c96b6117537c1be591f0339fdbb507025dc101786006b55bbc77b794e7219f23a872f31c00c627db158ead7b91a4be92", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000058680)={0x97, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x6, "f27468b328bafe"}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000049cc0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}], 0x0, "45146335e226df"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r6, 0xc0709411, &(0x7f0000000840)=ANY=[@ANYRES64=0x0, @ANYBLOB="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"]) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000525c0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000535c0)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {r9, r10}], 0x4, "4243c626854116"}) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000059680)={{0x0, 0x3, 0x3, 0x5, 0x53, 0x1, 0xfff, 0x1, 0x8, 0xffff, 0x5, 0x4, 0x14, 0x80, 0x1}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f000005a680)={0xfffffffffffffe68, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {r4}, {r5, r8}, {r11}], 0x8, "b94a5e8ad928a3"}) fallocate(r0, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xc, r1, 0x0, 0x3, 0x0, 0x2500000000000000}) 23:59:20 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r2, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) tkill(r0, 0x17) r3 = gettid() wait4(r3, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) tkill(r0, 0x2a) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000440)={0x0, "fc728e32cad97b1304edf3ad20361a2d"}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={0x0, 0x8, 0x1, [0x7f, 0x628f, 0x10001, 0x1, 0x2], [0x4, 0x81, 0x7, 0xfffffffffffffffe, 0x1, 0x4fc6, 0x7, 0x7ff, 0x1, 0x7, 0x7, 0x5, 0x6d5d202d, 0x9, 0x80000001, 0x4, 0x8, 0x5, 0x10100000, 0xfa, 0x20, 0x4, 0x81, 0x69ab, 0x401, 0x3, 0x7, 0x43, 0xffffffff, 0xb14, 0x8, 0x1000000000, 0x4, 0x3, 0x3ff, 0x8, 0x5, 0x4, 0x8, 0xe2, 0x1000, 0x9, 0x4, 0x9, 0x5, 0x8, 0x6, 0x6, 0xe3, 0x6, 0x163451fd, 0xe0, 0x2, 0x2, 0xfffffffffffffff8, 0x8, 0x10000, 0x4, 0x3, 0x2, 0x2, 0x40, 0x8, 0xfffffffffffff8f1, 0x5, 0xeda, 0x10000, 0x4, 0x10001, 0x9, 0x2, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0x5, 0x80, 0x8e2, 0x80000000, 0x1, 0x5, 0x6, 0x7, 0x7, 0x6, 0x4, 0x9, 0x2, 0xb37, 0x159, 0x1000, 0x1, 0x10000, 0x800, 0xb56, 0x7ff, 0xdb, 0x0, 0x10000, 0xfffffffffffffffb, 0x8, 0x1000, 0x8, 0x7, 0x4, 0x3, 0x5, 0x2, 0x7fffffff, 0x8, 0x4, 0x2, 0x7, 0x5, 0xffffffff, 0x7, 0x7, 0x100000001, 0x1000000009, 0x3, 0x7]}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:20 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r2, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) tkill(r0, 0x17) r3 = gettid() wait4(r3, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) tkill(r0, 0x2a) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000440)={0x0, "fc728e32cad97b1304edf3ad20361a2d"}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={0x0, 0x8, 0x1, [0x7f, 0x628f, 0x10001, 0x1, 0x2], [0x4, 0x81, 0x7, 0xfffffffffffffffe, 0x1, 0x4fc6, 0x7, 0x7ff, 0x1, 0x7, 0x7, 0x5, 0x6d5d202d, 0x9, 0x80000001, 0x4, 0x8, 0x5, 0x10100000, 0xfa, 0x20, 0x4, 0x81, 0x69ab, 0x401, 0x3, 0x7, 0x43, 0xffffffff, 0xb14, 0x8, 0x1000000000, 0x4, 0x3, 0x3ff, 0x8, 0x5, 0x4, 0x8, 0xe2, 0x1000, 0x9, 0x4, 0x9, 0x5, 0x8, 0x6, 0x6, 0xe3, 0x6, 0x163451fd, 0xe0, 0x2, 0x2, 0xfffffffffffffff8, 0x8, 0x10000, 0x4, 0x3, 0x2, 0x2, 0x40, 0x8, 0xfffffffffffff8f1, 0x5, 0xeda, 0x10000, 0x4, 0x10001, 0x9, 0x2, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0x5, 0x80, 0x8e2, 0x80000000, 0x1, 0x5, 0x6, 0x7, 0x7, 0x6, 0x4, 0x9, 0x2, 0xb37, 0x159, 0x1000, 0x1, 0x10000, 0x800, 0xb56, 0x7ff, 0xdb, 0x0, 0x10000, 0xfffffffffffffffb, 0x8, 0x1000, 0x8, 0x7, 0x4, 0x3, 0x5, 0x2, 0x7fffffff, 0x8, 0x4, 0x2, 0x7, 0x5, 0xffffffff, 0x7, 0x7, 0x100000001, 0x1000000009, 0x3, 0x7]}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000004c0)={0x7, 0x1, {0x101, @usage=0x5, 0x0, 0x3, 0xb2e, 0x4, 0x85c7, 0x6, 0x0, @usage, 0x1ff, 0x3, [0x1, 0x4, 0x1, 0xb9, 0x1f, 0x5]}, {0x6, @usage=0x7, 0x0, 0x4, 0x3, 0x6, 0x3, 0x1, 0x494, @struct={0x3, 0x8f}, 0x97c, 0x6, [0x1ff, 0xfffffffffffffbff, 0x9bc4, 0x401, 0x8, 0x4]}, {0x1f, @usage=0x7f, 0x0, 0xfffffffffffffffc, 0x0, 0x180000000000, 0x4, 0x2, 0x10, @struct={0x6, 0x60fb}, 0x80000000, 0x101, [0x7fffffff, 0x4, 0x800, 0x12f2, 0x3ff, 0x800]}, {0x401, 0x2}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 68.582097][ T57] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 68.604412][ C0] scsi_io_completion_action: 8 callbacks suppressed [ 68.604436][ C0] sd 0:0:1:0: tag#7414 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 68.620855][ C0] sd 0:0:1:0: tag#7414 CDB: opcode=0xe5 (vendor) [ 68.627199][ C0] sd 0:0:1:0: tag#7414 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 68.636345][ C0] sd 0:0:1:0: tag#7414 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 68.645506][ C0] sd 0:0:1:0: tag#7414 CDB[20]: ba 23:59:21 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r2, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) tkill(r0, 0x17) r3 = gettid() wait4(r3, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) tkill(r0, 0x2a) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000440)={0x0, "fc728e32cad97b1304edf3ad20361a2d"}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:21 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r2, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) tkill(r0, 0x17) r3 = gettid() wait4(r3, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) tkill(r0, 0x2a) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000440)={0x0, "fc728e32cad97b1304edf3ad20361a2d"}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={0x0, 0x8, 0x1, [0x7f, 0x628f, 0x10001, 0x1, 0x2], [0x4, 0x81, 0x7, 0xfffffffffffffffe, 0x1, 0x4fc6, 0x7, 0x7ff, 0x1, 0x7, 0x7, 0x5, 0x6d5d202d, 0x9, 0x80000001, 0x4, 0x8, 0x5, 0x10100000, 0xfa, 0x20, 0x4, 0x81, 0x69ab, 0x401, 0x3, 0x7, 0x43, 0xffffffff, 0xb14, 0x8, 0x1000000000, 0x4, 0x3, 0x3ff, 0x8, 0x5, 0x4, 0x8, 0xe2, 0x1000, 0x9, 0x4, 0x9, 0x5, 0x8, 0x6, 0x6, 0xe3, 0x6, 0x163451fd, 0xe0, 0x2, 0x2, 0xfffffffffffffff8, 0x8, 0x10000, 0x4, 0x3, 0x2, 0x2, 0x40, 0x8, 0xfffffffffffff8f1, 0x5, 0xeda, 0x10000, 0x4, 0x10001, 0x9, 0x2, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0x5, 0x80, 0x8e2, 0x80000000, 0x1, 0x5, 0x6, 0x7, 0x7, 0x6, 0x4, 0x9, 0x2, 0xb37, 0x159, 0x1000, 0x1, 0x10000, 0x800, 0xb56, 0x7ff, 0xdb, 0x0, 0x10000, 0xfffffffffffffffb, 0x8, 0x1000, 0x8, 0x7, 0x4, 0x3, 0x5, 0x2, 0x7fffffff, 0x8, 0x4, 0x2, 0x7, 0x5, 0xffffffff, 0x7, 0x7, 0x100000001, 0x1000000009, 0x3, 0x7]}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:21 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r2, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) tkill(r0, 0x17) r3 = gettid() wait4(r3, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) tkill(r0, 0x2a) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000440)={0x0, "fc728e32cad97b1304edf3ad20361a2d"}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={0x0, 0x8, 0x1, [0x7f, 0x628f, 0x10001, 0x1, 0x2], [0x4, 0x81, 0x7, 0xfffffffffffffffe, 0x1, 0x4fc6, 0x7, 0x7ff, 0x1, 0x7, 0x7, 0x5, 0x6d5d202d, 0x9, 0x80000001, 0x4, 0x8, 0x5, 0x10100000, 0xfa, 0x20, 0x4, 0x81, 0x69ab, 0x401, 0x3, 0x7, 0x43, 0xffffffff, 0xb14, 0x8, 0x1000000000, 0x4, 0x3, 0x3ff, 0x8, 0x5, 0x4, 0x8, 0xe2, 0x1000, 0x9, 0x4, 0x9, 0x5, 0x8, 0x6, 0x6, 0xe3, 0x6, 0x163451fd, 0xe0, 0x2, 0x2, 0xfffffffffffffff8, 0x8, 0x10000, 0x4, 0x3, 0x2, 0x2, 0x40, 0x8, 0xfffffffffffff8f1, 0x5, 0xeda, 0x10000, 0x4, 0x10001, 0x9, 0x2, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0x5, 0x80, 0x8e2, 0x80000000, 0x1, 0x5, 0x6, 0x7, 0x7, 0x6, 0x4, 0x9, 0x2, 0xb37, 0x159, 0x1000, 0x1, 0x10000, 0x800, 0xb56, 0x7ff, 0xdb, 0x0, 0x10000, 0xfffffffffffffffb, 0x8, 0x1000, 0x8, 0x7, 0x4, 0x3, 0x5, 0x2, 0x7fffffff, 0x8, 0x4, 0x2, 0x7, 0x5, 0xffffffff, 0x7, 0x7, 0x100000001, 0x1000000009, 0x3, 0x7]}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000004c0)={0x7, 0x1, {0x101, @usage=0x5, 0x0, 0x3, 0xb2e, 0x4, 0x85c7, 0x6, 0x0, @usage, 0x1ff, 0x3, [0x1, 0x4, 0x1, 0xb9, 0x1f, 0x5]}, {0x6, @usage=0x7, 0x0, 0x4, 0x3, 0x6, 0x3, 0x1, 0x494, @struct={0x3, 0x8f}, 0x97c, 0x6, [0x1ff, 0xfffffffffffffbff, 0x9bc4, 0x401, 0x8, 0x4]}, {0x1f, @usage=0x7f, 0x0, 0xfffffffffffffffc, 0x0, 0x180000000000, 0x4, 0x2, 0x10, @struct={0x6, 0x60fb}, 0x80000000, 0x101, [0x7fffffff, 0x4, 0x800, 0x12f2, 0x3ff, 0x800]}, {0x401, 0x2}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 68.733160][ C0] sd 0:0:1:0: tag#7415 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 68.743099][ C0] sd 0:0:1:0: tag#7415 CDB: opcode=0xe5 (vendor) [ 68.749455][ C0] sd 0:0:1:0: tag#7415 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 68.758493][ C0] sd 0:0:1:0: tag#7415 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 68.767550][ C0] sd 0:0:1:0: tag#7415 CDB[20]: ba 23:59:21 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r2, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) tkill(r0, 0x17) r3 = gettid() wait4(r3, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) tkill(r0, 0x2a) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000440)={0x0, "fc728e32cad97b1304edf3ad20361a2d"}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 68.851937][ C0] sd 0:0:1:0: tag#7416 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 68.861789][ C0] sd 0:0:1:0: tag#7416 CDB: opcode=0xe5 (vendor) [ 68.868139][ C0] sd 0:0:1:0: tag#7416 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 68.877186][ C0] sd 0:0:1:0: tag#7416 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 68.886233][ C0] sd 0:0:1:0: tag#7416 CDB[20]: ba [ 68.891383][ C0] sd 0:0:1:0: tag#7417 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s 23:59:21 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r2, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) tkill(r0, 0x17) r3 = gettid() wait4(r3, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) tkill(r0, 0x2a) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000440)={0x0, "fc728e32cad97b1304edf3ad20361a2d"}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={0x0, 0x8, 0x1, [0x7f, 0x628f, 0x10001, 0x1, 0x2], [0x4, 0x81, 0x7, 0xfffffffffffffffe, 0x1, 0x4fc6, 0x7, 0x7ff, 0x1, 0x7, 0x7, 0x5, 0x6d5d202d, 0x9, 0x80000001, 0x4, 0x8, 0x5, 0x10100000, 0xfa, 0x20, 0x4, 0x81, 0x69ab, 0x401, 0x3, 0x7, 0x43, 0xffffffff, 0xb14, 0x8, 0x1000000000, 0x4, 0x3, 0x3ff, 0x8, 0x5, 0x4, 0x8, 0xe2, 0x1000, 0x9, 0x4, 0x9, 0x5, 0x8, 0x6, 0x6, 0xe3, 0x6, 0x163451fd, 0xe0, 0x2, 0x2, 0xfffffffffffffff8, 0x8, 0x10000, 0x4, 0x3, 0x2, 0x2, 0x40, 0x8, 0xfffffffffffff8f1, 0x5, 0xeda, 0x10000, 0x4, 0x10001, 0x9, 0x2, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0x5, 0x80, 0x8e2, 0x80000000, 0x1, 0x5, 0x6, 0x7, 0x7, 0x6, 0x4, 0x9, 0x2, 0xb37, 0x159, 0x1000, 0x1, 0x10000, 0x800, 0xb56, 0x7ff, 0xdb, 0x0, 0x10000, 0xfffffffffffffffb, 0x8, 0x1000, 0x8, 0x7, 0x4, 0x3, 0x5, 0x2, 0x7fffffff, 0x8, 0x4, 0x2, 0x7, 0x5, 0xffffffff, 0x7, 0x7, 0x100000001, 0x1000000009, 0x3, 0x7]}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000004c0)={0x7, 0x1, {0x101, @usage=0x5, 0x0, 0x3, 0xb2e, 0x4, 0x85c7, 0x6, 0x0, @usage, 0x1ff, 0x3, [0x1, 0x4, 0x1, 0xb9, 0x1f, 0x5]}, {0x6, @usage=0x7, 0x0, 0x4, 0x3, 0x6, 0x3, 0x1, 0x494, @struct={0x3, 0x8f}, 0x97c, 0x6, [0x1ff, 0xfffffffffffffbff, 0x9bc4, 0x401, 0x8, 0x4]}, {0x1f, @usage=0x7f, 0x0, 0xfffffffffffffffc, 0x0, 0x180000000000, 0x4, 0x2, 0x10, @struct={0x6, 0x60fb}, 0x80000000, 0x101, [0x7fffffff, 0x4, 0x800, 0x12f2, 0x3ff, 0x800]}, {0x401, 0x2}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 68.901304][ C0] sd 0:0:1:0: tag#7417 CDB: opcode=0xe5 (vendor) [ 68.907666][ C0] sd 0:0:1:0: tag#7417 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 68.916700][ C0] sd 0:0:1:0: tag#7417 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 68.925735][ C0] sd 0:0:1:0: tag#7417 CDB[20]: ba [ 68.932872][ T3523] loop2: detected capacity change from 0 to 264192 23:59:21 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r2, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) tkill(r0, 0x17) r3 = gettid() wait4(r3, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) tkill(r0, 0x2a) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000440)={0x0, "fc728e32cad97b1304edf3ad20361a2d"}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={0x0, 0x8, 0x1, [0x7f, 0x628f, 0x10001, 0x1, 0x2], [0x4, 0x81, 0x7, 0xfffffffffffffffe, 0x1, 0x4fc6, 0x7, 0x7ff, 0x1, 0x7, 0x7, 0x5, 0x6d5d202d, 0x9, 0x80000001, 0x4, 0x8, 0x5, 0x10100000, 0xfa, 0x20, 0x4, 0x81, 0x69ab, 0x401, 0x3, 0x7, 0x43, 0xffffffff, 0xb14, 0x8, 0x1000000000, 0x4, 0x3, 0x3ff, 0x8, 0x5, 0x4, 0x8, 0xe2, 0x1000, 0x9, 0x4, 0x9, 0x5, 0x8, 0x6, 0x6, 0xe3, 0x6, 0x163451fd, 0xe0, 0x2, 0x2, 0xfffffffffffffff8, 0x8, 0x10000, 0x4, 0x3, 0x2, 0x2, 0x40, 0x8, 0xfffffffffffff8f1, 0x5, 0xeda, 0x10000, 0x4, 0x10001, 0x9, 0x2, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0x5, 0x80, 0x8e2, 0x80000000, 0x1, 0x5, 0x6, 0x7, 0x7, 0x6, 0x4, 0x9, 0x2, 0xb37, 0x159, 0x1000, 0x1, 0x10000, 0x800, 0xb56, 0x7ff, 0xdb, 0x0, 0x10000, 0xfffffffffffffffb, 0x8, 0x1000, 0x8, 0x7, 0x4, 0x3, 0x5, 0x2, 0x7fffffff, 0x8, 0x4, 0x2, 0x7, 0x5, 0xffffffff, 0x7, 0x7, 0x100000001, 0x1000000009, 0x3, 0x7]}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:21 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='gid_map\x00') r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup2(r1, r0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000000)={'mangle\x00', 0x0, [], '\x00', 0x0, 0x6000000}, &(0x7f0000000180)=0x54) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = socket(0x11, 0x3, 0x2) bind(r3, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) [ 68.998887][ T3523] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 23:59:22 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="8771e6bf00f208fc9153a39062b9319861db6d35144c", 0x16) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r3, r1, 0x0, 0xffffff04) 23:59:22 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r2, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) tkill(r0, 0x17) r3 = gettid() wait4(r3, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) tkill(r0, 0x2a) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000440)={0x0, "fc728e32cad97b1304edf3ad20361a2d"}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:22 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='gid_map\x00') r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup2(r1, r0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000000)={'mangle\x00', 0x0, [], '\x00', 0x0, 0x6000000}, &(0x7f0000000180)=0x54) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = socket(0x11, 0x3, 0x2) bind(r3, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 23:59:22 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r2, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) tkill(r0, 0x17) r3 = gettid() wait4(r3, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) tkill(r0, 0x2a) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000440)={0x0, "fc728e32cad97b1304edf3ad20361a2d"}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={0x0, 0x8, 0x1, [0x7f, 0x628f, 0x10001, 0x1, 0x2], [0x4, 0x81, 0x7, 0xfffffffffffffffe, 0x1, 0x4fc6, 0x7, 0x7ff, 0x1, 0x7, 0x7, 0x5, 0x6d5d202d, 0x9, 0x80000001, 0x4, 0x8, 0x5, 0x10100000, 0xfa, 0x20, 0x4, 0x81, 0x69ab, 0x401, 0x3, 0x7, 0x43, 0xffffffff, 0xb14, 0x8, 0x1000000000, 0x4, 0x3, 0x3ff, 0x8, 0x5, 0x4, 0x8, 0xe2, 0x1000, 0x9, 0x4, 0x9, 0x5, 0x8, 0x6, 0x6, 0xe3, 0x6, 0x163451fd, 0xe0, 0x2, 0x2, 0xfffffffffffffff8, 0x8, 0x10000, 0x4, 0x3, 0x2, 0x2, 0x40, 0x8, 0xfffffffffffff8f1, 0x5, 0xeda, 0x10000, 0x4, 0x10001, 0x9, 0x2, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0x5, 0x80, 0x8e2, 0x80000000, 0x1, 0x5, 0x6, 0x7, 0x7, 0x6, 0x4, 0x9, 0x2, 0xb37, 0x159, 0x1000, 0x1, 0x10000, 0x800, 0xb56, 0x7ff, 0xdb, 0x0, 0x10000, 0xfffffffffffffffb, 0x8, 0x1000, 0x8, 0x7, 0x4, 0x3, 0x5, 0x2, 0x7fffffff, 0x8, 0x4, 0x2, 0x7, 0x5, 0xffffffff, 0x7, 0x7, 0x100000001, 0x1000000009, 0x3, 0x7]}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:22 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r2, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) tkill(r0, 0x17) r3 = gettid() wait4(r3, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) tkill(r0, 0x2a) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000440)={0x0, "fc728e32cad97b1304edf3ad20361a2d"}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={0x0, 0x8, 0x1, [0x7f, 0x628f, 0x10001, 0x1, 0x2], [0x4, 0x81, 0x7, 0xfffffffffffffffe, 0x1, 0x4fc6, 0x7, 0x7ff, 0x1, 0x7, 0x7, 0x5, 0x6d5d202d, 0x9, 0x80000001, 0x4, 0x8, 0x5, 0x10100000, 0xfa, 0x20, 0x4, 0x81, 0x69ab, 0x401, 0x3, 0x7, 0x43, 0xffffffff, 0xb14, 0x8, 0x1000000000, 0x4, 0x3, 0x3ff, 0x8, 0x5, 0x4, 0x8, 0xe2, 0x1000, 0x9, 0x4, 0x9, 0x5, 0x8, 0x6, 0x6, 0xe3, 0x6, 0x163451fd, 0xe0, 0x2, 0x2, 0xfffffffffffffff8, 0x8, 0x10000, 0x4, 0x3, 0x2, 0x2, 0x40, 0x8, 0xfffffffffffff8f1, 0x5, 0xeda, 0x10000, 0x4, 0x10001, 0x9, 0x2, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0x5, 0x80, 0x8e2, 0x80000000, 0x1, 0x5, 0x6, 0x7, 0x7, 0x6, 0x4, 0x9, 0x2, 0xb37, 0x159, 0x1000, 0x1, 0x10000, 0x800, 0xb56, 0x7ff, 0xdb, 0x0, 0x10000, 0xfffffffffffffffb, 0x8, 0x1000, 0x8, 0x7, 0x4, 0x3, 0x5, 0x2, 0x7fffffff, 0x8, 0x4, 0x2, 0x7, 0x5, 0xffffffff, 0x7, 0x7, 0x100000001, 0x1000000009, 0x3, 0x7]}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:22 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000100)={@multicast2, @local, @multicast2}, 0xc) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, 0x0, 0x20000004) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000780)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendto(0xffffffffffffffff, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), r0) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x40, r2, 0x100, 0x70bd28, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)={0x4c, r2, 0x20, 0x70bd2b, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x7}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000081}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000e40)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@afid}, {@version_u}, {@access_uid={'access', 0x3d, 0xee00}}, {@version_L}, {@loose}, {@posixacl}]}}) clone(0x2000000, &(0x7f00000005c0)="8afa1d81c6d3cb48ed2400dbef65f5a98af686103b111061193faa06d8e28f62bb4cbb6c7503ea2afefb47934bc3287db6db7a782c34a07f7dca206d5b8e1881d52b5091eb86b7863bd8d256e2f33344a86f67e750911a8f77cb1fd928c5a8035428a237074520b16b8ee37847446131c5d29eaf02896470ec3c78494dfb7a76a0dcad2808f5b166a99f587e5f381b1c581fe27e0f41f2198147b74b9274b46c08132f2d199488722f7369be3ff11924c094fea3190e866c753235be29bee41dfc54d5474a5ce5743abdd450af5e1b14a68afa84e0752da88b6f4a41254ffe", &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000480)) [ 69.776041][ T3523] syz-executor.2 (3523) used greatest stack depth: 11520 bytes left [ 69.812763][ C0] sd 0:0:1:0: tag#7387 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s 23:59:22 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='gid_map\x00') r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup2(r1, r0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000000)={'mangle\x00', 0x0, [], '\x00', 0x0, 0x6000000}, &(0x7f0000000180)=0x54) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = socket(0x11, 0x3, 0x2) bind(r3, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 23:59:22 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r2, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) tkill(r0, 0x17) r3 = gettid() wait4(r3, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) tkill(r0, 0x2a) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000440)={0x0, "fc728e32cad97b1304edf3ad20361a2d"}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:22 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r2, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) tkill(r0, 0x17) r3 = gettid() wait4(r3, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) tkill(r0, 0x2a) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000440)={0x0, "fc728e32cad97b1304edf3ad20361a2d"}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={0x0, 0x8, 0x1, [0x7f, 0x628f, 0x10001, 0x1, 0x2], [0x4, 0x81, 0x7, 0xfffffffffffffffe, 0x1, 0x4fc6, 0x7, 0x7ff, 0x1, 0x7, 0x7, 0x5, 0x6d5d202d, 0x9, 0x80000001, 0x4, 0x8, 0x5, 0x10100000, 0xfa, 0x20, 0x4, 0x81, 0x69ab, 0x401, 0x3, 0x7, 0x43, 0xffffffff, 0xb14, 0x8, 0x1000000000, 0x4, 0x3, 0x3ff, 0x8, 0x5, 0x4, 0x8, 0xe2, 0x1000, 0x9, 0x4, 0x9, 0x5, 0x8, 0x6, 0x6, 0xe3, 0x6, 0x163451fd, 0xe0, 0x2, 0x2, 0xfffffffffffffff8, 0x8, 0x10000, 0x4, 0x3, 0x2, 0x2, 0x40, 0x8, 0xfffffffffffff8f1, 0x5, 0xeda, 0x10000, 0x4, 0x10001, 0x9, 0x2, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0x5, 0x80, 0x8e2, 0x80000000, 0x1, 0x5, 0x6, 0x7, 0x7, 0x6, 0x4, 0x9, 0x2, 0xb37, 0x159, 0x1000, 0x1, 0x10000, 0x800, 0xb56, 0x7ff, 0xdb, 0x0, 0x10000, 0xfffffffffffffffb, 0x8, 0x1000, 0x8, 0x7, 0x4, 0x3, 0x5, 0x2, 0x7fffffff, 0x8, 0x4, 0x2, 0x7, 0x5, 0xffffffff, 0x7, 0x7, 0x100000001, 0x1000000009, 0x3, 0x7]}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:22 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='gid_map\x00') r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup2(r1, r0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000000)={'mangle\x00', 0x0, [], '\x00', 0x0, 0x6000000}, &(0x7f0000000180)=0x54) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = socket(0x11, 0x3, 0x2) bind(r3, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) [ 69.822724][ C0] sd 0:0:1:0: tag#7387 CDB: opcode=0xe5 (vendor) [ 69.829073][ C0] sd 0:0:1:0: tag#7387 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 69.838109][ C0] sd 0:0:1:0: tag#7387 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 69.847149][ C0] sd 0:0:1:0: tag#7387 CDB[20]: ba [ 69.931079][ T3556] loop2: detected capacity change from 0 to 264192 [ 69.945653][ C0] sd 0:0:1:0: tag#7388 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 69.955499][ C0] sd 0:0:1:0: tag#7388 CDB: opcode=0xe5 (vendor) [ 69.961817][ C0] sd 0:0:1:0: tag#7388 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 69.970869][ C0] sd 0:0:1:0: tag#7388 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d 23:59:22 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r2, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) tkill(r0, 0x17) r3 = gettid() wait4(r3, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) tkill(r0, 0x2a) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000440)={0x0, "fc728e32cad97b1304edf3ad20361a2d"}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 69.979923][ C0] sd 0:0:1:0: tag#7388 CDB[20]: ba 23:59:22 executing program 4: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r2, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) tkill(r0, 0x17) r3 = gettid() wait4(r3, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) tkill(r0, 0x2a) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000440)={0x0, "fc728e32cad97b1304edf3ad20361a2d"}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 70.012078][ T3556] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 23:59:23 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="8771e6bf00f208fc9153a39062b9319861db6d35144c", 0x16) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r3, r1, 0x0, 0xffffff04) 23:59:23 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r2, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) tkill(r0, 0x17) r3 = gettid() wait4(r3, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) tkill(r0, 0x2a) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000440)={0x0, "fc728e32cad97b1304edf3ad20361a2d"}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:23 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='gid_map\x00') r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup2(r1, r0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000000)={'mangle\x00', 0x0, [], '\x00', 0x0, 0x6000000}, &(0x7f0000000180)=0x54) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = socket(0x11, 0x3, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 23:59:23 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x80, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x80, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) close(r2) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x8) syz_io_uring_setup(0x10c, &(0x7f0000000140)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x3f, 0x1, 0x2, 0x3, 0x0, 0x8, 0x10, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={&(0x7f0000000080)}, 0x1810, 0x400000000000, 0x800, 0x2, 0x6, 0x9, 0xf33, 0x0, 0x1, 0x0, 0x81}, 0x0, 0x9, r0, 0x2) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='gid_map\x00') r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup2(r4, r3) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, &(0x7f0000000000)={'mangle\x00', 0x0, [], '\x00', 0x0, 0x6000000}, &(0x7f0000000180)=0x54) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r3, 0x10000000) 23:59:23 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r2, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) tkill(r0, 0x17) r3 = gettid() wait4(r3, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) tkill(r0, 0x2a) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000440)={0x0, "fc728e32cad97b1304edf3ad20361a2d"}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={0x0, 0x8, 0x1, [0x7f, 0x628f, 0x10001, 0x1, 0x2], [0x4, 0x81, 0x7, 0xfffffffffffffffe, 0x1, 0x4fc6, 0x7, 0x7ff, 0x1, 0x7, 0x7, 0x5, 0x6d5d202d, 0x9, 0x80000001, 0x4, 0x8, 0x5, 0x10100000, 0xfa, 0x20, 0x4, 0x81, 0x69ab, 0x401, 0x3, 0x7, 0x43, 0xffffffff, 0xb14, 0x8, 0x1000000000, 0x4, 0x3, 0x3ff, 0x8, 0x5, 0x4, 0x8, 0xe2, 0x1000, 0x9, 0x4, 0x9, 0x5, 0x8, 0x6, 0x6, 0xe3, 0x6, 0x163451fd, 0xe0, 0x2, 0x2, 0xfffffffffffffff8, 0x8, 0x10000, 0x4, 0x3, 0x2, 0x2, 0x40, 0x8, 0xfffffffffffff8f1, 0x5, 0xeda, 0x10000, 0x4, 0x10001, 0x9, 0x2, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0x5, 0x80, 0x8e2, 0x80000000, 0x1, 0x5, 0x6, 0x7, 0x7, 0x6, 0x4, 0x9, 0x2, 0xb37, 0x159, 0x1000, 0x1, 0x10000, 0x800, 0xb56, 0x7ff, 0xdb, 0x0, 0x10000, 0xfffffffffffffffb, 0x8, 0x1000, 0x8, 0x7, 0x4, 0x3, 0x5, 0x2, 0x7fffffff, 0x8, 0x4, 0x2, 0x7, 0x5, 0xffffffff, 0x7, 0x7, 0x100000001, 0x1000000009, 0x3, 0x7]}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:23 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r2, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) tkill(r0, 0x17) r3 = gettid() wait4(r3, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) tkill(r0, 0x2a) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000440)={0x0, "fc728e32cad97b1304edf3ad20361a2d"}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 70.797650][ T22] kauditd_printk_skb: 47 callbacks suppressed [ 70.797663][ T22] audit: type=1400 audit(1635206363.089:145): avc: denied { map } for pid=3579 comm="syz-executor.4" path="socket:[13981]" dev="sockfs" ino=13981 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 23:59:23 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='gid_map\x00') r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup2(r1, r0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000000)={'mangle\x00', 0x0, [], '\x00', 0x0, 0x6000000}, &(0x7f0000000180)=0x54) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = socket(0x11, 0x3, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) [ 70.827296][ T22] audit: type=1400 audit(1635206363.089:146): avc: denied { read } for pid=3579 comm="syz-executor.4" path="socket:[13981]" dev="sockfs" ino=13981 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 23:59:23 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='gid_map\x00') r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup2(r1, r0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000000)={'mangle\x00', 0x0, [], '\x00', 0x0, 0x6000000}, &(0x7f0000000180)=0x54) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = socket(0x11, 0x3, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 23:59:23 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r2, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) tkill(r0, 0x17) r3 = gettid() wait4(r3, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 70.895002][ T3599] loop2: detected capacity change from 0 to 264192 [ 70.916768][ T3599] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 23:59:23 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x3, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x100, @private2, 0x7}, 0x1c) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100), 0x6e, &(0x7f0000000180)=[{&(0x7f0000000240)=""/161, 0xa1}, {&(0x7f0000000440)=""/209, 0xd1}], 0x2, &(0x7f00000001c0)=ANY=[@ANYRESHEX, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b30100003d00"/20, @ANYRES32, @ANYRES64=r1], 0x38}, 0x40000020) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SCSI_IOCTL_GET_IDLUN(r3, 0x5382, &(0x7f0000000580)) perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x7, 0x7fffffff}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x626f}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x32}, 0x0, @in=@private, 0x0, 0x0, 0x0, 0x4}}, 0xe8) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f00000629c0)={0x0, 0x0, "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", "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"}) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 23:59:23 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='gid_map\x00') r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup2(r1, r0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000000)={'mangle\x00', 0x0, [], '\x00', 0x0, 0x6000000}, &(0x7f0000000180)=0x54) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') bind(0xffffffffffffffff, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r2}}) 23:59:23 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r2, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) tkill(r0, 0x17) r3 = gettid() wait4(r3, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) tkill(r0, 0x2a) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000440)={0x0, "fc728e32cad97b1304edf3ad20361a2d"}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 71.025500][ T22] audit: type=1400 audit(1635206363.319:147): avc: denied { bind } for pid=3606 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 71.027335][ T3607] 9pnet: Insufficient options for proto=fd [ 71.045889][ T22] audit: type=1400 audit(1635206363.319:148): avc: denied { connect } for pid=3606 comm="syz-executor.4" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 71.052511][ C0] sd 0:0:1:0: tag#7386 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 71.082054][ C0] sd 0:0:1:0: tag#7386 CDB: opcode=0xe5 (vendor) [ 71.088418][ C0] sd 0:0:1:0: tag#7386 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 71.097464][ C0] sd 0:0:1:0: tag#7386 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 71.106539][ C0] sd 0:0:1:0: tag#7386 CDB[20]: ba [ 71.165199][ T22] audit: type=1400 audit(1635206363.409:149): avc: denied { ioctl } for pid=3606 comm="syz-executor.4" path="socket:[14044]" dev="sockfs" ino=14044 ioctlcmd=0xf502 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 71.190942][ T22] audit: type=1400 audit(1635206363.409:150): avc: denied { setopt } for pid=3606 comm="syz-executor.4" laddr=fe80::b lport=6 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 71.213540][ T22] audit: type=1400 audit(1635206363.409:151): avc: denied { write } for pid=3606 comm="syz-executor.4" laddr=fe80::b lport=6 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 23:59:24 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="8771e6bf00f208fc9153a39062b9319861db6d35144c", 0x16) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(0xffffffffffffffff, r1, 0x0, 0xffffff04) 23:59:24 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r2, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) tkill(r0, 0x17) r3 = gettid() wait4(r3, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) tkill(r0, 0x2a) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000440)={0x0, "fc728e32cad97b1304edf3ad20361a2d"}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:24 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r2, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) tkill(r0, 0x17) r3 = gettid() wait4(r3, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:24 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r2, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) tkill(r0, 0x17) r3 = gettid() wait4(r3, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) tkill(r0, 0x2a) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000440)={0x0, "fc728e32cad97b1304edf3ad20361a2d"}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:24 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='gid_map\x00') r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup2(r1, r0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000000)={'mangle\x00', 0x0, [], '\x00', 0x0, 0x6000000}, &(0x7f0000000180)=0x54) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') bind(0xffffffffffffffff, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r2}}) 23:59:24 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x3, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x100, @private2, 0x7}, 0x1c) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100), 0x6e, &(0x7f0000000180)=[{&(0x7f0000000240)=""/161, 0xa1}, {&(0x7f0000000440)=""/209, 0xd1}], 0x2, &(0x7f00000001c0)=ANY=[@ANYRESHEX, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b30100003d00"/20, @ANYRES32, @ANYRES64=r1], 0x38}, 0x40000020) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SCSI_IOCTL_GET_IDLUN(r3, 0x5382, &(0x7f0000000580)) perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x7, 0x7fffffff}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x626f}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x32}, 0x0, @in=@private, 0x0, 0x0, 0x0, 0x4}}, 0xe8) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f00000629c0)={0x0, 0x0, "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", "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"}) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) [ 71.752274][ T3624] 9pnet: Insufficient options for proto=fd [ 71.759208][ T520] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 71.770378][ C1] sd 0:0:1:0: tag#7387 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 71.780269][ C1] sd 0:0:1:0: tag#7387 CDB: opcode=0xe5 (vendor) [ 71.780300][ C1] sd 0:0:1:0: tag#7387 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c 23:59:24 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='gid_map\x00') r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup2(r1, r0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000000)={'mangle\x00', 0x0, [], '\x00', 0x0, 0x6000000}, &(0x7f0000000180)=0x54) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') bind(0xffffffffffffffff, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r2}}) [ 71.780318][ C1] sd 0:0:1:0: tag#7387 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 71.780344][ C1] sd 0:0:1:0: tag#7387 CDB[20]: ba 23:59:24 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r2, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) tkill(r0, 0x17) r3 = gettid() wait4(r3, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) tkill(r0, 0x2a) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000440)={0x0, "fc728e32cad97b1304edf3ad20361a2d"}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:24 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='gid_map\x00') r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup2(r1, r0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000000)={'mangle\x00', 0x0, [], '\x00', 0x0, 0x6000000}, &(0x7f0000000180)=0x54) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) r2 = socket(0x11, 0x3, 0x2) bind(r2, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}}) 23:59:24 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r2, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) tkill(r0, 0x17) r3 = gettid() wait4(r3, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) tkill(r0, 0x2a) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000440)={0x0, "fc728e32cad97b1304edf3ad20361a2d"}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 71.844460][ T3634] 9pnet: Insufficient options for proto=fd 23:59:24 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r2, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) tkill(r0, 0x17) r3 = gettid() wait4(r3, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 71.930314][ T3638] 9pnet: Insufficient options for proto=fd [ 71.936617][ T3642] loop2: detected capacity change from 0 to 264192 23:59:24 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='gid_map\x00') r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup2(r1, r0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000000)={'mangle\x00', 0x0, [], '\x00', 0x0, 0x6000000}, &(0x7f0000000180)=0x54) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) r2 = socket(0x11, 0x3, 0x2) bind(r2, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}}) [ 72.004663][ T3642] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 72.024724][ T3650] 9pnet: Insufficient options for proto=fd 23:59:25 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="8771e6bf00f208fc9153a39062b9319861db6d35144c", 0x16) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(0xffffffffffffffff, r1, 0x0, 0xffffff04) 23:59:25 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r2, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) tkill(r0, 0x17) r3 = gettid() wait4(r3, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) tkill(r0, 0x2a) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000440)={0x0, "fc728e32cad97b1304edf3ad20361a2d"}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={0x0, 0x8, 0x1, [0x7f, 0x628f, 0x10001, 0x1, 0x2], [0x4, 0x81, 0x7, 0xfffffffffffffffe, 0x1, 0x4fc6, 0x7, 0x7ff, 0x1, 0x7, 0x7, 0x5, 0x6d5d202d, 0x9, 0x80000001, 0x4, 0x8, 0x5, 0x10100000, 0xfa, 0x20, 0x4, 0x81, 0x69ab, 0x401, 0x3, 0x7, 0x43, 0xffffffff, 0xb14, 0x8, 0x1000000000, 0x4, 0x3, 0x3ff, 0x8, 0x5, 0x4, 0x8, 0xe2, 0x1000, 0x9, 0x4, 0x9, 0x5, 0x8, 0x6, 0x6, 0xe3, 0x6, 0x163451fd, 0xe0, 0x2, 0x2, 0xfffffffffffffff8, 0x8, 0x10000, 0x4, 0x3, 0x2, 0x2, 0x40, 0x8, 0xfffffffffffff8f1, 0x5, 0xeda, 0x10000, 0x4, 0x10001, 0x9, 0x2, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0x5, 0x80, 0x8e2, 0x80000000, 0x1, 0x5, 0x6, 0x7, 0x7, 0x6, 0x4, 0x9, 0x2, 0xb37, 0x159, 0x1000, 0x1, 0x10000, 0x800, 0xb56, 0x7ff, 0xdb, 0x0, 0x10000, 0xfffffffffffffffb, 0x8, 0x1000, 0x8, 0x7, 0x4, 0x3, 0x5, 0x2, 0x7fffffff, 0x8, 0x4, 0x2, 0x7, 0x5, 0xffffffff, 0x7, 0x7, 0x100000001, 0x1000000009, 0x3, 0x7]}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:25 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='gid_map\x00') r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup2(r1, r0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000000)={'mangle\x00', 0x0, [], '\x00', 0x0, 0x6000000}, &(0x7f0000000180)=0x54) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) r2 = socket(0x11, 0x3, 0x2) bind(r2, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}}) 23:59:25 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r2, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) tkill(r0, 0x17) r3 = gettid() wait4(r3, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:25 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r2, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) tkill(r0, 0x17) r3 = gettid() wait4(r3, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) tkill(r0, 0x2a) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000440)={0x0, "fc728e32cad97b1304edf3ad20361a2d"}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:25 executing program 4: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r2, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) tkill(r0, 0x17) r3 = gettid() wait4(r3, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) tkill(r0, 0x2a) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000440)={0x0, "fc728e32cad97b1304edf3ad20361a2d"}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:25 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='gid_map\x00') r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup2(r1, r0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000000)={'mangle\x00', 0x0, [], '\x00', 0x0, 0x6000000}, &(0x7f0000000180)=0x54) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = socket(0x11, 0x3, 0x2) bind(r3, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) [ 72.794683][ T3660] 9pnet: Insufficient options for proto=fd 23:59:25 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r2, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) tkill(r0, 0x17) r3 = gettid() wait4(r3, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) tkill(r0, 0x2a) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000440)={0x0, "fc728e32cad97b1304edf3ad20361a2d"}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={0x0, 0x8, 0x1, [0x7f, 0x628f, 0x10001, 0x1, 0x2], [0x4, 0x81, 0x7, 0xfffffffffffffffe, 0x1, 0x4fc6, 0x7, 0x7ff, 0x1, 0x7, 0x7, 0x5, 0x6d5d202d, 0x9, 0x80000001, 0x4, 0x8, 0x5, 0x10100000, 0xfa, 0x20, 0x4, 0x81, 0x69ab, 0x401, 0x3, 0x7, 0x43, 0xffffffff, 0xb14, 0x8, 0x1000000000, 0x4, 0x3, 0x3ff, 0x8, 0x5, 0x4, 0x8, 0xe2, 0x1000, 0x9, 0x4, 0x9, 0x5, 0x8, 0x6, 0x6, 0xe3, 0x6, 0x163451fd, 0xe0, 0x2, 0x2, 0xfffffffffffffff8, 0x8, 0x10000, 0x4, 0x3, 0x2, 0x2, 0x40, 0x8, 0xfffffffffffff8f1, 0x5, 0xeda, 0x10000, 0x4, 0x10001, 0x9, 0x2, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0x5, 0x80, 0x8e2, 0x80000000, 0x1, 0x5, 0x6, 0x7, 0x7, 0x6, 0x4, 0x9, 0x2, 0xb37, 0x159, 0x1000, 0x1, 0x10000, 0x800, 0xb56, 0x7ff, 0xdb, 0x0, 0x10000, 0xfffffffffffffffb, 0x8, 0x1000, 0x8, 0x7, 0x4, 0x3, 0x5, 0x2, 0x7fffffff, 0x8, 0x4, 0x2, 0x7, 0x5, 0xffffffff, 0x7, 0x7, 0x100000001, 0x1000000009, 0x3, 0x7]}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:25 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r2, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:25 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='gid_map\x00') r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup2(r1, r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = socket(0x11, 0x3, 0x2) bind(r3, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 23:59:25 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r2, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) tkill(r0, 0x17) r3 = gettid() wait4(r3, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:25 executing program 4: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r2, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) tkill(r0, 0x17) r3 = gettid() wait4(r3, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 72.867719][ T3670] loop2: detected capacity change from 0 to 264192 [ 72.894556][ T3670] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 23:59:26 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="8771e6bf00f208fc9153a39062b9319861db6d35144c", 0x16) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba868012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(0xffffffffffffffff, r1, 0x0, 0xffffff04) 23:59:26 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='gid_map\x00') socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:59:26 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r2, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) tkill(r0, 0x17) r3 = gettid() wait4(r3, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) tkill(r0, 0x2a) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000440)={0x0, "fc728e32cad97b1304edf3ad20361a2d"}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={0x0, 0x8, 0x1, [0x7f, 0x628f, 0x10001, 0x1, 0x2], [0x4, 0x81, 0x7, 0xfffffffffffffffe, 0x1, 0x4fc6, 0x7, 0x7ff, 0x1, 0x7, 0x7, 0x5, 0x6d5d202d, 0x9, 0x80000001, 0x4, 0x8, 0x5, 0x10100000, 0xfa, 0x20, 0x4, 0x81, 0x69ab, 0x401, 0x3, 0x7, 0x43, 0xffffffff, 0xb14, 0x8, 0x1000000000, 0x4, 0x3, 0x3ff, 0x8, 0x5, 0x4, 0x8, 0xe2, 0x1000, 0x9, 0x4, 0x9, 0x5, 0x8, 0x6, 0x6, 0xe3, 0x6, 0x163451fd, 0xe0, 0x2, 0x2, 0xfffffffffffffff8, 0x8, 0x10000, 0x4, 0x3, 0x2, 0x2, 0x40, 0x8, 0xfffffffffffff8f1, 0x5, 0xeda, 0x10000, 0x4, 0x10001, 0x9, 0x2, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0x5, 0x80, 0x8e2, 0x80000000, 0x1, 0x5, 0x6, 0x7, 0x7, 0x6, 0x4, 0x9, 0x2, 0xb37, 0x159, 0x1000, 0x1, 0x10000, 0x800, 0xb56, 0x7ff, 0xdb, 0x0, 0x10000, 0xfffffffffffffffb, 0x8, 0x1000, 0x8, 0x7, 0x4, 0x3, 0x5, 0x2, 0x7fffffff, 0x8, 0x4, 0x2, 0x7, 0x5, 0xffffffff, 0x7, 0x7, 0x100000001, 0x1000000009, 0x3, 0x7]}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:26 executing program 4: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="8771e6bf00f208fc9153a39062b9319861db6d35144c", 0x16) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(0xffffffffffffffff, r1, 0x0, 0xffffff04) 23:59:26 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r2, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) tkill(r0, 0x17) r3 = gettid() wait4(r3, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:26 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r2, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) tkill(r0, 0x17) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:26 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='gid_map\x00') r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 73.718394][ T3689] loop4: detected capacity change from 0 to 264192 [ 73.732549][ T57] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 23:59:26 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:59:26 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r2, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) tkill(r0, 0x17) r3 = gettid() wait4(r3, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 73.786264][ T3689] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 73.823652][ T3703] loop2: detected capacity change from 0 to 264192 23:59:26 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r2, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:26 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r2, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) tkill(r0, 0x17) r3 = gettid() wait4(r3, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) tkill(r0, 0x2a) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={0x0, 0x8, 0x1, [0x7f, 0x628f, 0x10001, 0x1, 0x2], [0x4, 0x81, 0x7, 0xfffffffffffffffe, 0x1, 0x4fc6, 0x7, 0x7ff, 0x1, 0x7, 0x7, 0x5, 0x6d5d202d, 0x9, 0x80000001, 0x4, 0x8, 0x5, 0x10100000, 0xfa, 0x20, 0x4, 0x81, 0x69ab, 0x401, 0x3, 0x7, 0x43, 0xffffffff, 0xb14, 0x8, 0x1000000000, 0x4, 0x3, 0x3ff, 0x8, 0x5, 0x4, 0x8, 0xe2, 0x1000, 0x9, 0x4, 0x9, 0x5, 0x8, 0x6, 0x6, 0xe3, 0x6, 0x163451fd, 0xe0, 0x2, 0x2, 0xfffffffffffffff8, 0x8, 0x10000, 0x4, 0x3, 0x2, 0x2, 0x40, 0x8, 0xfffffffffffff8f1, 0x5, 0xeda, 0x10000, 0x4, 0x10001, 0x9, 0x2, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0x5, 0x80, 0x8e2, 0x80000000, 0x1, 0x5, 0x6, 0x7, 0x7, 0x6, 0x4, 0x9, 0x2, 0xb37, 0x159, 0x1000, 0x1, 0x10000, 0x800, 0xb56, 0x7ff, 0xdb, 0x0, 0x10000, 0xfffffffffffffffb, 0x8, 0x1000, 0x8, 0x7, 0x4, 0x3, 0x5, 0x2, 0x7fffffff, 0x8, 0x4, 0x2, 0x7, 0x5, 0xffffffff, 0x7, 0x7, 0x100000001, 0x1000000009, 0x3, 0x7]}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 73.856973][ T3703] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 23:59:26 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 73.978371][ T3720] 9pnet: Insufficient options for proto=fd [ 74.610840][ T199] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 23:59:26 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="8771e6bf00f208fc9153a39062b9319861db6d35144c", 0x16) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba868012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r2, r1, 0x0, 0xffffff04) 23:59:26 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:59:26 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r2, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) tkill(r0, 0x17) r3 = gettid() wait4(r3, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:26 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r2, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:26 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r2, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) tkill(r0, 0x17) r3 = gettid() wait4(r3, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={0x0, 0x8, 0x1, [0x7f, 0x628f, 0x10001, 0x1, 0x2], [0x4, 0x81, 0x7, 0xfffffffffffffffe, 0x1, 0x4fc6, 0x7, 0x7ff, 0x1, 0x7, 0x7, 0x5, 0x6d5d202d, 0x9, 0x80000001, 0x4, 0x8, 0x5, 0x10100000, 0xfa, 0x20, 0x4, 0x81, 0x69ab, 0x401, 0x3, 0x7, 0x43, 0xffffffff, 0xb14, 0x8, 0x1000000000, 0x4, 0x3, 0x3ff, 0x8, 0x5, 0x4, 0x8, 0xe2, 0x1000, 0x9, 0x4, 0x9, 0x5, 0x8, 0x6, 0x6, 0xe3, 0x6, 0x163451fd, 0xe0, 0x2, 0x2, 0xfffffffffffffff8, 0x8, 0x10000, 0x4, 0x3, 0x2, 0x2, 0x40, 0x8, 0xfffffffffffff8f1, 0x5, 0xeda, 0x10000, 0x4, 0x10001, 0x9, 0x2, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0x5, 0x80, 0x8e2, 0x80000000, 0x1, 0x5, 0x6, 0x7, 0x7, 0x6, 0x4, 0x9, 0x2, 0xb37, 0x159, 0x1000, 0x1, 0x10000, 0x800, 0xb56, 0x7ff, 0xdb, 0x0, 0x10000, 0xfffffffffffffffb, 0x8, 0x1000, 0x8, 0x7, 0x4, 0x3, 0x5, 0x2, 0x7fffffff, 0x8, 0x4, 0x2, 0x7, 0x5, 0xffffffff, 0x7, 0x7, 0x100000001, 0x1000000009, 0x3, 0x7]}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:26 executing program 4: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r2, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:27 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 74.692633][ T3724] 9pnet: Insufficient options for proto=fd [ 74.703091][ T520] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 23:59:27 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:59:27 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r2, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:27 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, 0x0) r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:59:27 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x3, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x100, @private2, 0x7}, 0x1c) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100), 0x6e, &(0x7f0000000180)=[{&(0x7f0000000240)=""/161, 0xa1}, {&(0x7f0000000440)=""/209, 0xd1}], 0x2, &(0x7f00000001c0)=ANY=[@ANYRESHEX, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b30100003d00"/20, @ANYRES32, @ANYRES64=r1], 0x38}, 0x40000020) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SCSI_IOCTL_GET_IDLUN(r3, 0x5382, &(0x7f0000000580)) perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x7, 0x7fffffff}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x626f}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x32}, 0x0, @in=@private, 0x0, 0x0, 0x0, 0x4}}, 0xe8) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f00000629c0)={0x0, 0x0, "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", "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"}) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) [ 74.760697][ T3737] 9pnet: Insufficient options for proto=fd [ 74.797962][ T3739] loop2: detected capacity change from 0 to 264192 23:59:27 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r2, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) tkill(r0, 0x17) r3 = gettid() wait4(r3, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={0x0, 0x8, 0x1, [0x7f, 0x628f, 0x10001, 0x1, 0x2], [0x4, 0x81, 0x7, 0xfffffffffffffffe, 0x1, 0x4fc6, 0x7, 0x7ff, 0x1, 0x7, 0x7, 0x5, 0x6d5d202d, 0x9, 0x80000001, 0x4, 0x8, 0x5, 0x10100000, 0xfa, 0x20, 0x4, 0x81, 0x69ab, 0x401, 0x3, 0x7, 0x43, 0xffffffff, 0xb14, 0x8, 0x1000000000, 0x4, 0x3, 0x3ff, 0x8, 0x5, 0x4, 0x8, 0xe2, 0x1000, 0x9, 0x4, 0x9, 0x5, 0x8, 0x6, 0x6, 0xe3, 0x6, 0x163451fd, 0xe0, 0x2, 0x2, 0xfffffffffffffff8, 0x8, 0x10000, 0x4, 0x3, 0x2, 0x2, 0x40, 0x8, 0xfffffffffffff8f1, 0x5, 0xeda, 0x10000, 0x4, 0x10001, 0x9, 0x2, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0x5, 0x80, 0x8e2, 0x80000000, 0x1, 0x5, 0x6, 0x7, 0x7, 0x6, 0x4, 0x9, 0x2, 0xb37, 0x159, 0x1000, 0x1, 0x10000, 0x800, 0xb56, 0x7ff, 0xdb, 0x0, 0x10000, 0xfffffffffffffffb, 0x8, 0x1000, 0x8, 0x7, 0x4, 0x3, 0x5, 0x2, 0x7fffffff, 0x8, 0x4, 0x2, 0x7, 0x5, 0xffffffff, 0x7, 0x7, 0x100000001, 0x1000000009, 0x3, 0x7]}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 74.857607][ T3739] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 74.873913][ T3745] 9pnet: Insufficient options for proto=fd [ 74.885899][ C1] sd 0:0:1:0: tag#7402 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 74.895733][ C1] sd 0:0:1:0: tag#7402 CDB: opcode=0xe5 (vendor) 23:59:27 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="8771e6bf00f208fc9153a39062b9319861db6d35144c", 0x16) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r2, r1, 0x0, 0xffffff04) 23:59:27 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r2, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:27 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r2, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 74.902324][ C1] sd 0:0:1:0: tag#7402 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 74.911366][ C1] sd 0:0:1:0: tag#7402 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 74.920405][ C1] sd 0:0:1:0: tag#7402 CDB[20]: ba 23:59:27 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, 0x0) r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:59:27 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r2, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) tkill(r0, 0x17) r3 = gettid() wait4(r3, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={0x0, 0x8, 0x1, [0x7f, 0x628f, 0x10001, 0x1, 0x2], [0x4, 0x81, 0x7, 0xfffffffffffffffe, 0x1, 0x4fc6, 0x7, 0x7ff, 0x1, 0x7, 0x7, 0x5, 0x6d5d202d, 0x9, 0x80000001, 0x4, 0x8, 0x5, 0x10100000, 0xfa, 0x20, 0x4, 0x81, 0x69ab, 0x401, 0x3, 0x7, 0x43, 0xffffffff, 0xb14, 0x8, 0x1000000000, 0x4, 0x3, 0x3ff, 0x8, 0x5, 0x4, 0x8, 0xe2, 0x1000, 0x9, 0x4, 0x9, 0x5, 0x8, 0x6, 0x6, 0xe3, 0x6, 0x163451fd, 0xe0, 0x2, 0x2, 0xfffffffffffffff8, 0x8, 0x10000, 0x4, 0x3, 0x2, 0x2, 0x40, 0x8, 0xfffffffffffff8f1, 0x5, 0xeda, 0x10000, 0x4, 0x10001, 0x9, 0x2, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0x5, 0x80, 0x8e2, 0x80000000, 0x1, 0x5, 0x6, 0x7, 0x7, 0x6, 0x4, 0x9, 0x2, 0xb37, 0x159, 0x1000, 0x1, 0x10000, 0x800, 0xb56, 0x7ff, 0xdb, 0x0, 0x10000, 0xfffffffffffffffb, 0x8, 0x1000, 0x8, 0x7, 0x4, 0x3, 0x5, 0x2, 0x7fffffff, 0x8, 0x4, 0x2, 0x7, 0x5, 0xffffffff, 0x7, 0x7, 0x100000001, 0x1000000009, 0x3, 0x7]}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 74.967202][ T199] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 74.999972][ T3760] 9pnet: Insufficient options for proto=fd 23:59:27 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, 0x0) r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:59:27 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r2, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) tkill(r0, 0x17) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 75.054764][ T3766] loop2: detected capacity change from 0 to 264192 [ 75.080761][ T3766] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 75.095581][ T3769] 9pnet: Insufficient options for proto=fd 23:59:27 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="8771e6bf00f208fc9153a39062b9319861db6d35144c", 0x16) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r2, r1, 0x0, 0xffffff04) 23:59:27 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x0, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:59:27 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r2, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 75.143432][ T199] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 75.244443][ T3782] loop2: detected capacity change from 0 to 264192 [ 75.247867][ T3783] 9pnet: Insufficient options for proto=fd [ 75.266895][ T3782] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 75.311255][ T199] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 23:59:27 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="8771e6bf00f208fc9153a39062b9319861db6d35144c", 0x16) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) 23:59:27 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r2, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={0x0, 0x8, 0x1, [0x7f, 0x628f, 0x10001, 0x1, 0x2], [0x4, 0x81, 0x7, 0xfffffffffffffffe, 0x1, 0x4fc6, 0x7, 0x7ff, 0x1, 0x7, 0x7, 0x5, 0x6d5d202d, 0x9, 0x80000001, 0x4, 0x8, 0x5, 0x10100000, 0xfa, 0x20, 0x4, 0x81, 0x69ab, 0x401, 0x3, 0x7, 0x43, 0xffffffff, 0xb14, 0x8, 0x1000000000, 0x4, 0x3, 0x3ff, 0x8, 0x5, 0x4, 0x8, 0xe2, 0x1000, 0x9, 0x4, 0x9, 0x5, 0x8, 0x6, 0x6, 0xe3, 0x6, 0x163451fd, 0xe0, 0x2, 0x2, 0xfffffffffffffff8, 0x8, 0x10000, 0x4, 0x3, 0x2, 0x2, 0x40, 0x8, 0xfffffffffffff8f1, 0x5, 0xeda, 0x10000, 0x4, 0x10001, 0x9, 0x2, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0x5, 0x80, 0x8e2, 0x80000000, 0x1, 0x5, 0x6, 0x7, 0x7, 0x6, 0x4, 0x9, 0x2, 0xb37, 0x159, 0x1000, 0x1, 0x10000, 0x800, 0xb56, 0x7ff, 0xdb, 0x0, 0x10000, 0xfffffffffffffffb, 0x8, 0x1000, 0x8, 0x7, 0x4, 0x3, 0x5, 0x2, 0x7fffffff, 0x8, 0x4, 0x2, 0x7, 0x5, 0xffffffff, 0x7, 0x7, 0x100000001, 0x1000000009, 0x3, 0x7]}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:27 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r2, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) tkill(r0, 0x17) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:27 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x0, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:59:27 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r2, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) tkill(r0, 0x17) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:27 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = socket(0x10, 0x803, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r0, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) r1 = socket(0x10, 0x803, 0x0) write(r1, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r1, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x8800, 0x0) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000024c0)='/proc/self/attr/exec\x00', 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000002500)=0x0) getgroups(0xa, &(0x7f0000002540)=[0xee00, 0x0, 0xee01, 0x0, 0xee00, 0xee00, 0xffffffffffffffff, 0xffffffffffffffff, 0xee00, 0x0]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002580)={0x0}, &(0x7f00000025c0)=0xc) r7 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000026c0)=[{{&(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002700)=[{&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000012c0)="d493a9993541a8d3116d7568b93a984d1910f0b53f9c80b698b3cf1ce9308b981d40d49995dcc6e254b947f633982e8a3e65443b0ae39b93047855359aaa912cd46a57e26e5b41772db942a66d355788b0cebb32a1472e73c4300b078c8127ff2a4e9b032c2a31467f9797e1e28f73e48a9913068d89c8f5c980f48e6da350a70309c53d68e6064e222b7885e4ee15eb953a980c990c4a12f86e8bd7b5497955b3a30b5c8f966442638e42c8a6a32aa66f49eb74db8ef1960d", 0xb9}, {&(0x7f0000001380)="2af3e601f6214b395b262876dca8783a9644931db544dd5451b0edb727d1d04c6635644a6ef4d9782bd0fa0c6d08a8aafd8e2be8cc127a72d64dff02c206418e1ebaba7c8a298cae2d4d84e0ac0c4bfbe5ff2aa38c400064589c5b74345b7635a115f60ec770fd2bc6408675bdc32c0b80fd1c6273963f4241f14161ae2f23114e22d32a913949daf0d5f498af826565f3817b77bea9287c4d5b87a3c0416c9d6c2aa75458f7c96722e0feb61aef71fc0f2003ae2c", 0xb5}, {&(0x7f0000001440)="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", 0x1000}, {&(0x7f0000000040)="948da709ce6ee6a0d066526c838a0e570f4284a24bf2a69b01d169eaab6a6d3077658cd0b4722a", 0x27}, {&(0x7f00000000c0)}], 0x6, &(0x7f0000002600)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, 0xee01, r5}}}, @cred={{0x1c, 0x1, 0x2, {r6, r8, 0xee00}}}], 0x90, 0x804}}], 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000000080)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000daf4655fdbf4655fdbf4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000daf4655fdaf4655fdaf4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 75.523696][ T3793] loop2: detected capacity change from 0 to 264192 [ 75.549108][ T3793] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 23:59:27 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r2 = syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000014c0)=[{0x0}, {&(0x7f0000000240)}, {0x0}], 0x1, 0x0) readv(r2, &(0x7f0000001840)=[{0x0}, {&(0x7f0000000540)=""/198, 0x51}], 0x2) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135021c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000001c0)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1315, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00003b1000/0x3000)=nil, 0x3000, 0x2, 0x110, 0xffffffffffffffff, 0x72d5000) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000040)={0x0, 0x0, 0xf4ffffff, 0x8000000}) pipe(&(0x7f0000000000)) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0), 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r3, 0x8130bbd572c6a739, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xea0f59a7af5586da}, 0x80) write(0xffffffffffffffff, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x0, 0x5f25e204a58875b5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)={0x14, 0x0, 0x0, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x895}, 0x4000001) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000015c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="74696d655f6f66667365743d307830303030303030303030303030363030ac005c9a2f8322479cf3dad63ca4cf69b172f21cd50342a1e0db3a22591dd6b64828de28d3f48c058601258ae00ce37e9270a94b4293dfd30c053c994c7145e2b848c03cc8e9ed05681566433247cb914d0d4ea0d42efdf4f07b89c86d5771a2b586238a0d6f6abf1654"]) 23:59:27 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="8771e6bf00f208fc9153a39062b9319861db6d35144c", 0x16) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) [ 75.558287][ T22] audit: type=1400 audit(1635206367.839:152): avc: denied { read } for pid=3795 comm="syz-executor.4" name="autofs" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 75.581703][ T22] audit: type=1400 audit(1635206367.839:153): avc: denied { open } for pid=3795 comm="syz-executor.4" path="/dev/autofs" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 75.607775][ T3800] 9pnet: Insufficient options for proto=fd 23:59:27 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r2, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) tkill(r0, 0x17) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:27 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x0, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 75.637115][ T529] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 75.672595][ C0] sd 0:0:1:0: tag#7407 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s 23:59:28 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r2, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) tkill(r0, 0x17) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 75.682477][ C0] sd 0:0:1:0: tag#7407 CDB: opcode=0xe5 (vendor) [ 75.688819][ C0] sd 0:0:1:0: tag#7407 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 02 1c [ 75.697857][ C0] sd 0:0:1:0: tag#7407 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 75.706898][ C0] sd 0:0:1:0: tag#7407 CDB[20]: ba 23:59:28 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r2, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={0x0, 0x8, 0x1, [0x7f, 0x628f, 0x10001, 0x1, 0x2], [0x4, 0x81, 0x7, 0xfffffffffffffffe, 0x1, 0x4fc6, 0x7, 0x7ff, 0x1, 0x7, 0x7, 0x5, 0x6d5d202d, 0x9, 0x80000001, 0x4, 0x8, 0x5, 0x10100000, 0xfa, 0x20, 0x4, 0x81, 0x69ab, 0x401, 0x3, 0x7, 0x43, 0xffffffff, 0xb14, 0x8, 0x1000000000, 0x4, 0x3, 0x3ff, 0x8, 0x5, 0x4, 0x8, 0xe2, 0x1000, 0x9, 0x4, 0x9, 0x5, 0x8, 0x6, 0x6, 0xe3, 0x6, 0x163451fd, 0xe0, 0x2, 0x2, 0xfffffffffffffff8, 0x8, 0x10000, 0x4, 0x3, 0x2, 0x2, 0x40, 0x8, 0xfffffffffffff8f1, 0x5, 0xeda, 0x10000, 0x4, 0x10001, 0x9, 0x2, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0x5, 0x80, 0x8e2, 0x80000000, 0x1, 0x5, 0x6, 0x7, 0x7, 0x6, 0x4, 0x9, 0x2, 0xb37, 0x159, 0x1000, 0x1, 0x10000, 0x800, 0xb56, 0x7ff, 0xdb, 0x0, 0x10000, 0xfffffffffffffffb, 0x8, 0x1000, 0x8, 0x7, 0x4, 0x3, 0x5, 0x2, 0x7fffffff, 0x8, 0x4, 0x2, 0x7, 0x5, 0xffffffff, 0x7, 0x7, 0x100000001, 0x1000000009, 0x3, 0x7]}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:28 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x0, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 75.770013][ T3806] 9pnet: Insufficient options for proto=fd [ 75.794688][ T3816] loop2: detected capacity change from 0 to 264192 23:59:28 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r2, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) tkill(r0, 0x17) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 75.827297][ T3816] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 75.838244][ T3819] 9pnet: Insufficient options for proto=fd [ 75.861129][ C1] sd 0:0:1:0: tag#7408 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 75.870994][ C1] sd 0:0:1:0: tag#7408 CDB: opcode=0xe5 (vendor) 23:59:28 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r2, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={0x0, 0x8, 0x1, [0x7f, 0x628f, 0x10001, 0x1, 0x2], [0x4, 0x81, 0x7, 0xfffffffffffffffe, 0x1, 0x4fc6, 0x7, 0x7ff, 0x1, 0x7, 0x7, 0x5, 0x6d5d202d, 0x9, 0x80000001, 0x4, 0x8, 0x5, 0x10100000, 0xfa, 0x20, 0x4, 0x81, 0x69ab, 0x401, 0x3, 0x7, 0x43, 0xffffffff, 0xb14, 0x8, 0x1000000000, 0x4, 0x3, 0x3ff, 0x8, 0x5, 0x4, 0x8, 0xe2, 0x1000, 0x9, 0x4, 0x9, 0x5, 0x8, 0x6, 0x6, 0xe3, 0x6, 0x163451fd, 0xe0, 0x2, 0x2, 0xfffffffffffffff8, 0x8, 0x10000, 0x4, 0x3, 0x2, 0x2, 0x40, 0x8, 0xfffffffffffff8f1, 0x5, 0xeda, 0x10000, 0x4, 0x10001, 0x9, 0x2, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0x5, 0x80, 0x8e2, 0x80000000, 0x1, 0x5, 0x6, 0x7, 0x7, 0x6, 0x4, 0x9, 0x2, 0xb37, 0x159, 0x1000, 0x1, 0x10000, 0x800, 0xb56, 0x7ff, 0xdb, 0x0, 0x10000, 0xfffffffffffffffb, 0x8, 0x1000, 0x8, 0x7, 0x4, 0x3, 0x5, 0x2, 0x7fffffff, 0x8, 0x4, 0x2, 0x7, 0x5, 0xffffffff, 0x7, 0x7, 0x100000001, 0x1000000009, 0x3, 0x7]}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:28 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="8771e6bf00f208fc9153a39062b9319861db6d35144c", 0x16) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) 23:59:28 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r2, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 75.877357][ C1] sd 0:0:1:0: tag#7408 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 02 1c [ 75.886408][ C1] sd 0:0:1:0: tag#7408 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 75.895446][ C1] sd 0:0:1:0: tag#7408 CDB[20]: ba [ 75.912795][ T529] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 23:59:28 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x0, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 75.934925][ T3828] 9pnet: Insufficient options for proto=fd 23:59:28 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r2, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:28 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x0, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:59:28 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r2, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) tkill(r0, 0x17) wait4(0x0, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) tkill(r0, 0x2a) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={0x0, 0x8, 0x1, [0x7f, 0x628f, 0x10001, 0x1, 0x2], [0x4, 0x81, 0x7, 0xfffffffffffffffe, 0x1, 0x4fc6, 0x7, 0x7ff, 0x1, 0x7, 0x7, 0x5, 0x6d5d202d, 0x9, 0x80000001, 0x4, 0x8, 0x5, 0x10100000, 0xfa, 0x20, 0x4, 0x81, 0x69ab, 0x401, 0x3, 0x7, 0x43, 0xffffffff, 0xb14, 0x8, 0x1000000000, 0x4, 0x3, 0x3ff, 0x8, 0x5, 0x4, 0x8, 0xe2, 0x1000, 0x9, 0x4, 0x9, 0x5, 0x8, 0x6, 0x6, 0xe3, 0x6, 0x163451fd, 0xe0, 0x2, 0x2, 0xfffffffffffffff8, 0x8, 0x10000, 0x4, 0x3, 0x2, 0x2, 0x40, 0x8, 0xfffffffffffff8f1, 0x5, 0xeda, 0x10000, 0x4, 0x10001, 0x9, 0x2, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0x5, 0x80, 0x8e2, 0x80000000, 0x1, 0x5, 0x6, 0x7, 0x7, 0x6, 0x4, 0x9, 0x2, 0xb37, 0x159, 0x1000, 0x1, 0x10000, 0x800, 0xb56, 0x7ff, 0xdb, 0x0, 0x10000, 0xfffffffffffffffb, 0x8, 0x1000, 0x8, 0x7, 0x4, 0x3, 0x5, 0x2, 0x7fffffff, 0x8, 0x4, 0x2, 0x7, 0x5, 0xffffffff, 0x7, 0x7, 0x100000001, 0x1000000009, 0x3, 0x7]}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:28 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20000850}, 0x20000801) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r3) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000580)={0x248, r4, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x10c, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66c33c8c}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61bf3692}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x288b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x47c32ae6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1177fd6e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x58212fa8}]}, {0x4}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe648}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3a95c43}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbf07}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x47e4}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x300f5a18}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7b311cc3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe0c8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xde75}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x55bc1649}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcdd8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb437}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xb047468}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc083}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4a7e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2dd94800}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9f5b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xba61}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f49a723}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xce35}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x37d966ea}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x15d3ce44}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x47e4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x14a2}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xc0, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x232cb15e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5c8fea18}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x57333b93}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6a349129}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6cf9738f}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x786568ea}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x97d9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x34e95037}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf977}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4f45}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1ff256ec}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2b2e0cfd}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1b80}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x10509bbd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1e2868c8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x441c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2bc9e736}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x89aeed3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x14f2340}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x24ff}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1c442c8b}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSCATLST={0x28, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2cf3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1cd67dee}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x862ed51}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x91e6}]}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x248}, 0x1, 0x0, 0x0, 0xc000}, 0x4000) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x1d8, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0xcc, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x35aa69db}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5c1bba4d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4dad7b71}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x61}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2c124b67}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x30838b60}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x92368bd}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x214896ef}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5acf534a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x60}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xff}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xb439fbe}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x37d69401}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc8}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x54}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4ba9995c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xed}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x77}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4a6ec924}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x86}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xf0, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x59cb8838}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdef3}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdc4c}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d65f074}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x69ab}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6a3b2f3e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3a60980d}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaf}, @NLBL_CIPSOV4_A_MLSCATREM={0xffffff63, 0xa, 0x95fc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaa62}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9ce2}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaa8e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf569}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4e7f633}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf21}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x421a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4df6d27d}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4d80}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa3cd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x133c9c25}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xac37}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x441}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x370610fb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe0fb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6618}]}]}]}, 0x1d8}}, 0x40000) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) [ 76.003796][ T3834] loop2: detected capacity change from 0 to 264192 23:59:28 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="8771e6bf00f208fc9153a39062b9319861db6d35144c", 0x16) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, 0xffffffffffffffff, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r2, r1, 0x0, 0xffffff04) 23:59:28 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r1 = socket(0x10, 0x803, 0x0) write(r1, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r1, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:28 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 76.052607][ T3834] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 76.053070][ T3839] 9pnet: Insufficient options for proto=fd [ 76.081007][ T529] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 23:59:28 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/mem_sleep', 0x2, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7461726765742050f08f70d25a928726382e6600"], 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='gid_map\x00') r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x40, 0x0) dup2(r2, r1) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000000)={'mangle\x00', 0x0, [], '\x00', 0x0, 0x6000000}, &(0x7f0000000180)=0x54) write$vga_arbiter(r1, &(0x7f0000000000)=@other={'trylock', ' ', 'io+mem'}, 0xf) r3 = socket(0x10, 0x803, 0x0) write(r3, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, &(0x7f00000001c0)=0xffffffff, 0x4) sendto(r3, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) fsetxattr$trusted_overlay_opaque(r3, &(0x7f0000000100), &(0x7f0000000140), 0x2, 0x1) 23:59:28 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r2, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:28 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="8771e6bf00f208fc9153a39062b9319861db6d35144c", 0x16) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, 0xffffffffffffffff, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r2, r1, 0x0, 0xffffff04) 23:59:28 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:59:28 executing program 4: creat(&(0x7f0000000300)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x100, 0xffffffffffffffff, 0x0) [ 76.244759][ T3862] loop2: detected capacity change from 0 to 264192 23:59:28 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r2, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) tkill(r0, 0x17) wait4(0x0, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) tkill(r0, 0x2a) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={0x0, 0x8, 0x1, [0x7f, 0x628f, 0x10001, 0x1, 0x2], [0x4, 0x81, 0x7, 0xfffffffffffffffe, 0x1, 0x4fc6, 0x7, 0x7ff, 0x1, 0x7, 0x7, 0x5, 0x6d5d202d, 0x9, 0x80000001, 0x4, 0x8, 0x5, 0x10100000, 0xfa, 0x20, 0x4, 0x81, 0x69ab, 0x401, 0x3, 0x7, 0x43, 0xffffffff, 0xb14, 0x8, 0x1000000000, 0x4, 0x3, 0x3ff, 0x8, 0x5, 0x4, 0x8, 0xe2, 0x1000, 0x9, 0x4, 0x9, 0x5, 0x8, 0x6, 0x6, 0xe3, 0x6, 0x163451fd, 0xe0, 0x2, 0x2, 0xfffffffffffffff8, 0x8, 0x10000, 0x4, 0x3, 0x2, 0x2, 0x40, 0x8, 0xfffffffffffff8f1, 0x5, 0xeda, 0x10000, 0x4, 0x10001, 0x9, 0x2, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0x5, 0x80, 0x8e2, 0x80000000, 0x1, 0x5, 0x6, 0x7, 0x7, 0x6, 0x4, 0x9, 0x2, 0xb37, 0x159, 0x1000, 0x1, 0x10000, 0x800, 0xb56, 0x7ff, 0xdb, 0x0, 0x10000, 0xfffffffffffffffb, 0x8, 0x1000, 0x8, 0x7, 0x4, 0x3, 0x5, 0x2, 0x7fffffff, 0x8, 0x4, 0x2, 0x7, 0x5, 0xffffffff, 0x7, 0x7, 0x100000001, 0x1000000009, 0x3, 0x7]}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:28 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:59:28 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x30, 0x0, 0x0, 0xfffff010}, {0x7c}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) io_setup(0xf6e8, &(0x7f0000000240)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000c3c5529095b0c07f934efdecca49ed34358f9e25c3f60fb9dd40524467bd417a97f3450839fb3f859ea538aa6afa678e634aff4cb30bc7bb019e8cdf3e455d295dbdc2155f", @ANYRES32=r0, @ANYBLOB="00040000000005002e2f66696c653000"]) openat$cgroup_type(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='gid_map\x00') r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup2(r3, r2) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000000)={'raw\x00', 0x0, [0x0, 0x0, 0x7fffffff, 0x0, 0x80000000], '\x00', 0x0, 0x6000000}, &(0x7f0000000180)=0x54) timerfd_create(0x4, 0x800) r4 = socket(0x10, 0x803, 0x0) write(r4, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000000340)=0x1, 0x4) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) shutdown(r5, 0x1) getsockopt$inet_tcp_buf(r5, 0x6, 0xb, 0x0, &(0x7f0000000200)) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) socket$inet_udplite(0x2, 0x2, 0x88) 23:59:28 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r1 = socket(0x10, 0x803, 0x0) write(r1, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r1, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 76.298552][ T3862] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 23:59:28 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="8771e6bf00f208fc9153a39062b9319861db6d35144c", 0x16) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, 0xffffffffffffffff, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r2, r1, 0x0, 0xffffff04) 23:59:28 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r2, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:28 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(0xffffffffffffffff, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:59:28 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r1 = socket(0x10, 0x803, 0x0) write(r1, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r1, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:28 executing program 4: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x0, "2156816c73038c"}) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sched_getscheduler(0x0) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0xe5, 0x3, 0x2, 0x2, 0x0, 0x80000001, 0x20000, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x101, 0x4, @perf_config_ext={0x2, 0xffffffffffffb412}, 0x42, 0x72, 0x30, 0x2, 0x5c, 0xfffffff7, 0x933, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r0, 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r4 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) ftruncate(r4, 0x10001) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055c80)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r1}], 0x0, "1f4b5e509c82d4"}) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) 23:59:28 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(0xffffffffffffffff, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 76.461997][ T3890] loop2: detected capacity change from 0 to 264192 23:59:28 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r2, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) tkill(r0, 0x17) wait4(0x0, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) tkill(r0, 0x2a) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={0x0, 0x8, 0x1, [0x7f, 0x628f, 0x10001, 0x1, 0x2], [0x4, 0x81, 0x7, 0xfffffffffffffffe, 0x1, 0x4fc6, 0x7, 0x7ff, 0x1, 0x7, 0x7, 0x5, 0x6d5d202d, 0x9, 0x80000001, 0x4, 0x8, 0x5, 0x10100000, 0xfa, 0x20, 0x4, 0x81, 0x69ab, 0x401, 0x3, 0x7, 0x43, 0xffffffff, 0xb14, 0x8, 0x1000000000, 0x4, 0x3, 0x3ff, 0x8, 0x5, 0x4, 0x8, 0xe2, 0x1000, 0x9, 0x4, 0x9, 0x5, 0x8, 0x6, 0x6, 0xe3, 0x6, 0x163451fd, 0xe0, 0x2, 0x2, 0xfffffffffffffff8, 0x8, 0x10000, 0x4, 0x3, 0x2, 0x2, 0x40, 0x8, 0xfffffffffffff8f1, 0x5, 0xeda, 0x10000, 0x4, 0x10001, 0x9, 0x2, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0x5, 0x80, 0x8e2, 0x80000000, 0x1, 0x5, 0x6, 0x7, 0x7, 0x6, 0x4, 0x9, 0x2, 0xb37, 0x159, 0x1000, 0x1, 0x10000, 0x800, 0xb56, 0x7ff, 0xdb, 0x0, 0x10000, 0xfffffffffffffffb, 0x8, 0x1000, 0x8, 0x7, 0x4, 0x3, 0x5, 0x2, 0x7fffffff, 0x8, 0x4, 0x2, 0x7, 0x5, 0xffffffff, 0x7, 0x7, 0x100000001, 0x1000000009, 0x3, 0x7]}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:28 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r2, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:28 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) [ 76.533267][ C0] sd 0:0:1:0: tag#7412 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 76.543123][ C0] sd 0:0:1:0: tag#7412 CDB: opcode=0xe5 (vendor) [ 76.543141][ C0] sd 0:0:1:0: tag#7412 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 76.543166][ C0] sd 0:0:1:0: tag#7412 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d 23:59:28 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r1 = socket(0x10, 0x803, 0x0) write(r1, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:28 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r2, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) r3 = gettid() wait4(r3, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) tkill(r0, 0x2a) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={0x0, 0x8, 0x1, [0x7f, 0x628f, 0x10001, 0x1, 0x2], [0x4, 0x81, 0x7, 0xfffffffffffffffe, 0x1, 0x4fc6, 0x7, 0x7ff, 0x1, 0x7, 0x7, 0x5, 0x6d5d202d, 0x9, 0x80000001, 0x4, 0x8, 0x5, 0x10100000, 0xfa, 0x20, 0x4, 0x81, 0x69ab, 0x401, 0x3, 0x7, 0x43, 0xffffffff, 0xb14, 0x8, 0x1000000000, 0x4, 0x3, 0x3ff, 0x8, 0x5, 0x4, 0x8, 0xe2, 0x1000, 0x9, 0x4, 0x9, 0x5, 0x8, 0x6, 0x6, 0xe3, 0x6, 0x163451fd, 0xe0, 0x2, 0x2, 0xfffffffffffffff8, 0x8, 0x10000, 0x4, 0x3, 0x2, 0x2, 0x40, 0x8, 0xfffffffffffff8f1, 0x5, 0xeda, 0x10000, 0x4, 0x10001, 0x9, 0x2, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0x5, 0x80, 0x8e2, 0x80000000, 0x1, 0x5, 0x6, 0x7, 0x7, 0x6, 0x4, 0x9, 0x2, 0xb37, 0x159, 0x1000, 0x1, 0x10000, 0x800, 0xb56, 0x7ff, 0xdb, 0x0, 0x10000, 0xfffffffffffffffb, 0x8, 0x1000, 0x8, 0x7, 0x4, 0x3, 0x5, 0x2, 0x7fffffff, 0x8, 0x4, 0x2, 0x7, 0x5, 0xffffffff, 0x7, 0x7, 0x100000001, 0x1000000009, 0x3, 0x7]}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:28 executing program 4: set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x2) creat(&(0x7f0000000140)='./file0\x00', 0xab) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 76.543180][ C0] sd 0:0:1:0: tag#7412 CDB[20]: ba 23:59:29 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r2, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 76.556564][ T3890] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 23:59:29 executing program 4: unshare(0x4e040400) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x80e85411, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3, 0x2, 0xffff, 0x2, 0x1000}}) 23:59:29 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r1 = socket(0x10, 0x803, 0x0) write(r1, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 76.588276][ T3907] 9pnet: Insufficient options for proto=fd [ 76.601625][ T57] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 23:59:29 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r2, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) r3 = gettid() wait4(r3, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) tkill(r0, 0x2a) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={0x0, 0x8, 0x1, [0x7f, 0x628f, 0x10001, 0x1, 0x2], [0x4, 0x81, 0x7, 0xfffffffffffffffe, 0x1, 0x4fc6, 0x7, 0x7ff, 0x1, 0x7, 0x7, 0x5, 0x6d5d202d, 0x9, 0x80000001, 0x4, 0x8, 0x5, 0x10100000, 0xfa, 0x20, 0x4, 0x81, 0x69ab, 0x401, 0x3, 0x7, 0x43, 0xffffffff, 0xb14, 0x8, 0x1000000000, 0x4, 0x3, 0x3ff, 0x8, 0x5, 0x4, 0x8, 0xe2, 0x1000, 0x9, 0x4, 0x9, 0x5, 0x8, 0x6, 0x6, 0xe3, 0x6, 0x163451fd, 0xe0, 0x2, 0x2, 0xfffffffffffffff8, 0x8, 0x10000, 0x4, 0x3, 0x2, 0x2, 0x40, 0x8, 0xfffffffffffff8f1, 0x5, 0xeda, 0x10000, 0x4, 0x10001, 0x9, 0x2, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0x5, 0x80, 0x8e2, 0x80000000, 0x1, 0x5, 0x6, 0x7, 0x7, 0x6, 0x4, 0x9, 0x2, 0xb37, 0x159, 0x1000, 0x1, 0x10000, 0x800, 0xb56, 0x7ff, 0xdb, 0x0, 0x10000, 0xfffffffffffffffb, 0x8, 0x1000, 0x8, 0x7, 0x4, 0x3, 0x5, 0x2, 0x7fffffff, 0x8, 0x4, 0x2, 0x7, 0x5, 0xffffffff, 0x7, 0x7, 0x100000001, 0x1000000009, 0x3, 0x7]}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 76.606341][ C1] sd 0:0:1:0: tag#7413 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s 23:59:29 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r2, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 76.606365][ C1] sd 0:0:1:0: tag#7413 CDB: opcode=0xe5 (vendor) [ 76.606403][ C1] sd 0:0:1:0: tag#7413 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 76.606429][ C1] sd 0:0:1:0: tag#7413 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d 23:59:29 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(0xffffffffffffffff, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:59:29 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r1 = socket(0x10, 0x803, 0x0) write(r1, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:29 executing program 4: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffff00b]}, 0x8) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, 0x0, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg(r1, &(0x7f0000000740)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x0, 0x0, 0x0, "c6388020b5a5b1c2137be889c8edd89da8323013be5ac44b4af8abcb2b4e8fd2255309a200863c198ac1d7dc40aa037d6c2291a7b34abf14b4d4b53bd2c513"}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000680)="f66007cc53254f5a502417968906ebd6d6b3a4d663e69f4847da24d8a6860d4166162ab4b544d724a2019af882a0c630377581b6", 0x34}], 0x1}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r2, &(0x7f00000001c0)="257d0fced6cc5eac9edf5b73658f94d8118989fb3ce6af86476dfeca2bd613bcc611a21bc6b971ce580818fee8b5089ac366e6b88dd1ec11d7013f656d582edf2ffd3f52fc3d21a75f9c639c901f0ae677", 0x51, 0x0, &(0x7f0000000240)={0xa, 0x4e24, 0x6, @mcast2, 0xff}, 0x1c) [ 76.606445][ C1] sd 0:0:1:0: tag#7413 CDB[20]: ba [ 76.684270][ T3913] loop2: detected capacity change from 0 to 264192 [ 76.692304][ T3913] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 77.021088][ T22] audit: type=1400 audit(1635206369.309:154): avc: denied { write } for pid=3944 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 23:59:29 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000600)="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", 0x200) sendfile(0xffffffffffffffff, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r2, 0xffffffffffffffff, 0x0, 0xffffff04) 23:59:29 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r2, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) r3 = gettid() wait4(r3, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) tkill(r0, 0x2a) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={0x0, 0x8, 0x1, [0x7f, 0x628f, 0x10001, 0x1, 0x2], [0x4, 0x81, 0x7, 0xfffffffffffffffe, 0x1, 0x4fc6, 0x7, 0x7ff, 0x1, 0x7, 0x7, 0x5, 0x6d5d202d, 0x9, 0x80000001, 0x4, 0x8, 0x5, 0x10100000, 0xfa, 0x20, 0x4, 0x81, 0x69ab, 0x401, 0x3, 0x7, 0x43, 0xffffffff, 0xb14, 0x8, 0x1000000000, 0x4, 0x3, 0x3ff, 0x8, 0x5, 0x4, 0x8, 0xe2, 0x1000, 0x9, 0x4, 0x9, 0x5, 0x8, 0x6, 0x6, 0xe3, 0x6, 0x163451fd, 0xe0, 0x2, 0x2, 0xfffffffffffffff8, 0x8, 0x10000, 0x4, 0x3, 0x2, 0x2, 0x40, 0x8, 0xfffffffffffff8f1, 0x5, 0xeda, 0x10000, 0x4, 0x10001, 0x9, 0x2, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0x5, 0x80, 0x8e2, 0x80000000, 0x1, 0x5, 0x6, 0x7, 0x7, 0x6, 0x4, 0x9, 0x2, 0xb37, 0x159, 0x1000, 0x1, 0x10000, 0x800, 0xb56, 0x7ff, 0xdb, 0x0, 0x10000, 0xfffffffffffffffb, 0x8, 0x1000, 0x8, 0x7, 0x4, 0x3, 0x5, 0x2, 0x7fffffff, 0x8, 0x4, 0x2, 0x7, 0x5, 0xffffffff, 0x7, 0x7, 0x100000001, 0x1000000009, 0x3, 0x7]}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:29 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r2, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:29 executing program 4: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r2, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:29 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) socket(0x10, 0x803, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:29 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:59:29 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 77.547382][ T520] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 23:59:29 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r1 = socket(0x10, 0x803, 0x0) write(r1, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r1, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:29 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:59:29 executing program 4: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) 23:59:29 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 77.639864][ T3970] loop2: detected capacity change from 0 to 264192 23:59:29 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r2, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) r3 = gettid() wait4(r3, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) tkill(r0, 0x2a) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={0x0, 0x8, 0x1, [0x7f, 0x628f, 0x10001, 0x1, 0x2], [0x4, 0x81, 0x7, 0xfffffffffffffffe, 0x1, 0x4fc6, 0x7, 0x7ff, 0x1, 0x7, 0x7, 0x5, 0x6d5d202d, 0x9, 0x80000001, 0x4, 0x8, 0x5, 0x10100000, 0xfa, 0x20, 0x4, 0x81, 0x69ab, 0x401, 0x3, 0x7, 0x43, 0xffffffff, 0xb14, 0x8, 0x1000000000, 0x4, 0x3, 0x3ff, 0x8, 0x5, 0x4, 0x8, 0xe2, 0x1000, 0x9, 0x4, 0x9, 0x5, 0x8, 0x6, 0x6, 0xe3, 0x6, 0x163451fd, 0xe0, 0x2, 0x2, 0xfffffffffffffff8, 0x8, 0x10000, 0x4, 0x3, 0x2, 0x2, 0x40, 0x8, 0xfffffffffffff8f1, 0x5, 0xeda, 0x10000, 0x4, 0x10001, 0x9, 0x2, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0x5, 0x80, 0x8e2, 0x80000000, 0x1, 0x5, 0x6, 0x7, 0x7, 0x6, 0x4, 0x9, 0x2, 0xb37, 0x159, 0x1000, 0x1, 0x10000, 0x800, 0xb56, 0x7ff, 0xdb, 0x0, 0x10000, 0xfffffffffffffffb, 0x8, 0x1000, 0x8, 0x7, 0x4, 0x3, 0x5, 0x2, 0x7fffffff, 0x8, 0x4, 0x2, 0x7, 0x5, 0xffffffff, 0x7, 0x7, 0x100000001, 0x1000000009, 0x3, 0x7]}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:30 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000600)="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", 0x200) sendfile(0xffffffffffffffff, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r2, 0xffffffffffffffff, 0x0, 0xffffff04) 23:59:30 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 77.680812][ T3976] loop4: detected capacity change from 0 to 264192 [ 77.699302][ T3970] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 23:59:30 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:59:30 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:30 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r1 = socket(0x10, 0x803, 0x0) write(r1, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r1, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 77.770486][ T3976] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 77.780914][ T57] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 23:59:30 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r2, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) tkill(r0, 0x17) r3 = gettid() wait4(r3, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) tkill(r0, 0x2a) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={0x0, 0x8, 0x1, [0x7f, 0x628f, 0x10001, 0x1, 0x2], [0x4, 0x81, 0x7, 0xfffffffffffffffe, 0x1, 0x4fc6, 0x7, 0x7ff, 0x1, 0x7, 0x7, 0x5, 0x6d5d202d, 0x9, 0x80000001, 0x4, 0x8, 0x5, 0x10100000, 0xfa, 0x20, 0x4, 0x81, 0x69ab, 0x401, 0x3, 0x7, 0x43, 0xffffffff, 0xb14, 0x8, 0x1000000000, 0x4, 0x3, 0x3ff, 0x8, 0x5, 0x4, 0x8, 0xe2, 0x1000, 0x9, 0x4, 0x9, 0x5, 0x8, 0x6, 0x6, 0xe3, 0x6, 0x163451fd, 0xe0, 0x2, 0x2, 0xfffffffffffffff8, 0x8, 0x10000, 0x4, 0x3, 0x2, 0x2, 0x40, 0x8, 0xfffffffffffff8f1, 0x5, 0xeda, 0x10000, 0x4, 0x10001, 0x9, 0x2, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0x5, 0x80, 0x8e2, 0x80000000, 0x1, 0x5, 0x6, 0x7, 0x7, 0x6, 0x4, 0x9, 0x2, 0xb37, 0x159, 0x1000, 0x1, 0x10000, 0x800, 0xb56, 0x7ff, 0xdb, 0x0, 0x10000, 0xfffffffffffffffb, 0x8, 0x1000, 0x8, 0x7, 0x4, 0x3, 0x5, 0x2, 0x7fffffff, 0x8, 0x4, 0x2, 0x7, 0x5, 0xffffffff, 0x7, 0x7, 0x100000001, 0x1000000009, 0x3, 0x7]}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:30 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 77.883632][ T3997] loop2: detected capacity change from 0 to 264192 23:59:30 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:59:30 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r1 = socket(0x10, 0x803, 0x0) write(r1, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r1, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 77.957904][ T3997] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 23:59:30 executing program 4: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) 23:59:30 executing program 1: ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x17) tkill(0x0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) wait4(0x0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:30 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000600)="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", 0x200) sendfile(0xffffffffffffffff, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r2, 0xffffffffffffffff, 0x0, 0xffffff04) 23:59:30 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:59:30 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r2, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) tkill(r0, 0x17) r3 = gettid() wait4(r3, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) tkill(r0, 0x2a) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={0x0, 0x8, 0x1, [0x7f, 0x628f, 0x10001, 0x1, 0x2], [0x4, 0x81, 0x7, 0xfffffffffffffffe, 0x1, 0x4fc6, 0x7, 0x7ff, 0x1, 0x7, 0x7, 0x5, 0x6d5d202d, 0x9, 0x80000001, 0x4, 0x8, 0x5, 0x10100000, 0xfa, 0x20, 0x4, 0x81, 0x69ab, 0x401, 0x3, 0x7, 0x43, 0xffffffff, 0xb14, 0x8, 0x1000000000, 0x4, 0x3, 0x3ff, 0x8, 0x5, 0x4, 0x8, 0xe2, 0x1000, 0x9, 0x4, 0x9, 0x5, 0x8, 0x6, 0x6, 0xe3, 0x6, 0x163451fd, 0xe0, 0x2, 0x2, 0xfffffffffffffff8, 0x8, 0x10000, 0x4, 0x3, 0x2, 0x2, 0x40, 0x8, 0xfffffffffffff8f1, 0x5, 0xeda, 0x10000, 0x4, 0x10001, 0x9, 0x2, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0x5, 0x80, 0x8e2, 0x80000000, 0x1, 0x5, 0x6, 0x7, 0x7, 0x6, 0x4, 0x9, 0x2, 0xb37, 0x159, 0x1000, 0x1, 0x10000, 0x800, 0xb56, 0x7ff, 0xdb, 0x0, 0x10000, 0xfffffffffffffffb, 0x8, 0x1000, 0x8, 0x7, 0x4, 0x3, 0x5, 0x2, 0x7fffffff, 0x8, 0x4, 0x2, 0x7, 0x5, 0xffffffff, 0x7, 0x7, 0x100000001, 0x1000000009, 0x3, 0x7]}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:30 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:30 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r2, r0, 0x0, 0xffffff04) [ 78.555393][ T4013] loop2: detected capacity change from 0 to 264192 [ 78.568829][ T4013] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 78.590350][ T57] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 23:59:30 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:30 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:59:30 executing program 1: ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x17) tkill(0x0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) wait4(0x0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 78.625991][ T4025] loop4: detected capacity change from 0 to 264192 23:59:31 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 78.675921][ T4025] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 78.699064][ T4034] loop2: detected capacity change from 0 to 264192 23:59:31 executing program 1: ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x17) tkill(0x0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) wait4(0x0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 78.805214][ T4034] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 23:59:31 executing program 4: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) 23:59:31 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:31 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r2, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) tkill(r0, 0x17) r3 = gettid() wait4(r3, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) tkill(r0, 0x2a) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={0x0, 0x8, 0x1, [0x7f, 0x628f, 0x10001, 0x1, 0x2], [0x4, 0x81, 0x7, 0xfffffffffffffffe, 0x1, 0x4fc6, 0x7, 0x7ff, 0x1, 0x7, 0x7, 0x5, 0x6d5d202d, 0x9, 0x80000001, 0x4, 0x8, 0x5, 0x10100000, 0xfa, 0x20, 0x4, 0x81, 0x69ab, 0x401, 0x3, 0x7, 0x43, 0xffffffff, 0xb14, 0x8, 0x1000000000, 0x4, 0x3, 0x3ff, 0x8, 0x5, 0x4, 0x8, 0xe2, 0x1000, 0x9, 0x4, 0x9, 0x5, 0x8, 0x6, 0x6, 0xe3, 0x6, 0x163451fd, 0xe0, 0x2, 0x2, 0xfffffffffffffff8, 0x8, 0x10000, 0x4, 0x3, 0x2, 0x2, 0x40, 0x8, 0xfffffffffffff8f1, 0x5, 0xeda, 0x10000, 0x4, 0x10001, 0x9, 0x2, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0x5, 0x80, 0x8e2, 0x80000000, 0x1, 0x5, 0x6, 0x7, 0x7, 0x6, 0x4, 0x9, 0x2, 0xb37, 0x159, 0x1000, 0x1, 0x10000, 0x800, 0xb56, 0x7ff, 0xdb, 0x0, 0x10000, 0xfffffffffffffffb, 0x8, 0x1000, 0x8, 0x7, 0x4, 0x3, 0x5, 0x2, 0x7fffffff, 0x8, 0x4, 0x2, 0x7, 0x5, 0xffffffff, 0x7, 0x7, 0x100000001, 0x1000000009, 0x3, 0x7]}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:31 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:59:31 executing program 1: r0 = clone3(0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:31 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r2, r0, 0x0, 0xffffff04) 23:59:31 executing program 1: r0 = clone3(0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 79.494363][ T4047] loop2: detected capacity change from 0 to 264192 [ 79.505491][ T529] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 23:59:31 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 79.534614][ T4047] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 23:59:31 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r0 = socket(0x11, 0x3, 0x2) bind(r0, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, 0x0) 23:59:31 executing program 1: r0 = clone3(0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:31 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r1 = socket(0x10, 0x803, 0x0) write(r1, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r1, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) r2 = gettid() wait4(r2, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) tkill(r0, 0x2a) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={0x0, 0x8, 0x1, [0x7f, 0x628f, 0x10001, 0x1, 0x2], [0x4, 0x81, 0x7, 0xfffffffffffffffe, 0x1, 0x4fc6, 0x7, 0x7ff, 0x1, 0x7, 0x7, 0x5, 0x6d5d202d, 0x9, 0x80000001, 0x4, 0x8, 0x5, 0x10100000, 0xfa, 0x20, 0x4, 0x81, 0x69ab, 0x401, 0x3, 0x7, 0x43, 0xffffffff, 0xb14, 0x8, 0x1000000000, 0x4, 0x3, 0x3ff, 0x8, 0x5, 0x4, 0x8, 0xe2, 0x1000, 0x9, 0x4, 0x9, 0x5, 0x8, 0x6, 0x6, 0xe3, 0x6, 0x163451fd, 0xe0, 0x2, 0x2, 0xfffffffffffffff8, 0x8, 0x10000, 0x4, 0x3, 0x2, 0x2, 0x40, 0x8, 0xfffffffffffff8f1, 0x5, 0xeda, 0x10000, 0x4, 0x10001, 0x9, 0x2, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0x5, 0x80, 0x8e2, 0x80000000, 0x1, 0x5, 0x6, 0x7, 0x7, 0x6, 0x4, 0x9, 0x2, 0xb37, 0x159, 0x1000, 0x1, 0x10000, 0x800, 0xb56, 0x7ff, 0xdb, 0x0, 0x10000, 0xfffffffffffffffb, 0x8, 0x1000, 0x8, 0x7, 0x4, 0x3, 0x5, 0x2, 0x7fffffff, 0x8, 0x4, 0x2, 0x7, 0x5, 0xffffffff, 0x7, 0x7, 0x100000001, 0x1000000009, 0x3, 0x7]}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:31 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r2, r0, 0x0, 0xffffff04) [ 79.603548][ T4061] loop4: detected capacity change from 0 to 264192 [ 79.650920][ T4061] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 79.676436][ T4069] loop2: detected capacity change from 0 to 264192 [ 79.717568][ T4069] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 23:59:32 executing program 4: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r3, r1, 0x0, 0xffffff04) 23:59:32 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:32 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x0, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:32 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r1 = socket(0x10, 0x803, 0x0) write(r1, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r1, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) r2 = gettid() wait4(r2, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) tkill(r0, 0x2a) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={0x0, 0x8, 0x1, [0x7f, 0x628f, 0x10001, 0x1, 0x2], [0x4, 0x81, 0x7, 0xfffffffffffffffe, 0x1, 0x4fc6, 0x7, 0x7ff, 0x1, 0x7, 0x7, 0x5, 0x6d5d202d, 0x9, 0x80000001, 0x4, 0x8, 0x5, 0x10100000, 0xfa, 0x20, 0x4, 0x81, 0x69ab, 0x401, 0x3, 0x7, 0x43, 0xffffffff, 0xb14, 0x8, 0x1000000000, 0x4, 0x3, 0x3ff, 0x8, 0x5, 0x4, 0x8, 0xe2, 0x1000, 0x9, 0x4, 0x9, 0x5, 0x8, 0x6, 0x6, 0xe3, 0x6, 0x163451fd, 0xe0, 0x2, 0x2, 0xfffffffffffffff8, 0x8, 0x10000, 0x4, 0x3, 0x2, 0x2, 0x40, 0x8, 0xfffffffffffff8f1, 0x5, 0xeda, 0x10000, 0x4, 0x10001, 0x9, 0x2, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0x5, 0x80, 0x8e2, 0x80000000, 0x1, 0x5, 0x6, 0x7, 0x7, 0x6, 0x4, 0x9, 0x2, 0xb37, 0x159, 0x1000, 0x1, 0x10000, 0x800, 0xb56, 0x7ff, 0xdb, 0x0, 0x10000, 0xfffffffffffffffb, 0x8, 0x1000, 0x8, 0x7, 0x4, 0x3, 0x5, 0x2, 0x7fffffff, 0x8, 0x4, 0x2, 0x7, 0x5, 0xffffffff, 0x7, 0x7, 0x100000001, 0x1000000009, 0x3, 0x7]}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:32 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r0 = socket(0x11, 0x3, 0x2) bind(r0, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, 0x0) 23:59:32 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) fchdir(0xffffffffffffffff) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r2, r0, 0x0, 0xffffff04) 23:59:32 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r0 = socket(0x11, 0x3, 0x2) bind(r0, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, 0x0) 23:59:32 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x0, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 80.464365][ T199] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 80.485191][ T4078] loop2: detected capacity change from 0 to 264192 [ 80.504779][ T4078] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 23:59:32 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) fchdir(0xffffffffffffffff) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r2, r0, 0x0, 0xffffff04) 23:59:32 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r1 = socket(0x10, 0x803, 0x0) write(r1, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r1, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) r2 = gettid() wait4(r2, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) tkill(r0, 0x2a) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={0x0, 0x8, 0x1, [0x7f, 0x628f, 0x10001, 0x1, 0x2], [0x4, 0x81, 0x7, 0xfffffffffffffffe, 0x1, 0x4fc6, 0x7, 0x7ff, 0x1, 0x7, 0x7, 0x5, 0x6d5d202d, 0x9, 0x80000001, 0x4, 0x8, 0x5, 0x10100000, 0xfa, 0x20, 0x4, 0x81, 0x69ab, 0x401, 0x3, 0x7, 0x43, 0xffffffff, 0xb14, 0x8, 0x1000000000, 0x4, 0x3, 0x3ff, 0x8, 0x5, 0x4, 0x8, 0xe2, 0x1000, 0x9, 0x4, 0x9, 0x5, 0x8, 0x6, 0x6, 0xe3, 0x6, 0x163451fd, 0xe0, 0x2, 0x2, 0xfffffffffffffff8, 0x8, 0x10000, 0x4, 0x3, 0x2, 0x2, 0x40, 0x8, 0xfffffffffffff8f1, 0x5, 0xeda, 0x10000, 0x4, 0x10001, 0x9, 0x2, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0x5, 0x80, 0x8e2, 0x80000000, 0x1, 0x5, 0x6, 0x7, 0x7, 0x6, 0x4, 0x9, 0x2, 0xb37, 0x159, 0x1000, 0x1, 0x10000, 0x800, 0xb56, 0x7ff, 0xdb, 0x0, 0x10000, 0xfffffffffffffffb, 0x8, 0x1000, 0x8, 0x7, 0x4, 0x3, 0x5, 0x2, 0x7fffffff, 0x8, 0x4, 0x2, 0x7, 0x5, 0xffffffff, 0x7, 0x7, 0x100000001, 0x1000000009, 0x3, 0x7]}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:32 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r0 = socket(0x11, 0x3, 0x2) bind(r0, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}}) 23:59:32 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 80.574644][ T4089] loop4: detected capacity change from 0 to 264192 [ 80.632271][ T4093] 9pnet: Insufficient options for proto=fd [ 80.641138][ T4098] loop2: detected capacity change from 0 to 264192 [ 80.670083][ T4089] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 80.689237][ T4098] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 23:59:33 executing program 4: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r3, r1, 0x0, 0xffffff04) 23:59:33 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x0, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:33 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r0 = socket(0x11, 0x3, 0x2) bind(r0, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}}) 23:59:33 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:33 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) fchdir(0xffffffffffffffff) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r2, r0, 0x0, 0xffffff04) 23:59:33 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) r3 = gettid() wait4(r3, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) tkill(r0, 0x2a) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={0x0, 0x8, 0x1, [0x7f, 0x628f, 0x10001, 0x1, 0x2], [0x4, 0x81, 0x7, 0xfffffffffffffffe, 0x1, 0x4fc6, 0x7, 0x7ff, 0x1, 0x7, 0x7, 0x5, 0x6d5d202d, 0x9, 0x80000001, 0x4, 0x8, 0x5, 0x10100000, 0xfa, 0x20, 0x4, 0x81, 0x69ab, 0x401, 0x3, 0x7, 0x43, 0xffffffff, 0xb14, 0x8, 0x1000000000, 0x4, 0x3, 0x3ff, 0x8, 0x5, 0x4, 0x8, 0xe2, 0x1000, 0x9, 0x4, 0x9, 0x5, 0x8, 0x6, 0x6, 0xe3, 0x6, 0x163451fd, 0xe0, 0x2, 0x2, 0xfffffffffffffff8, 0x8, 0x10000, 0x4, 0x3, 0x2, 0x2, 0x40, 0x8, 0xfffffffffffff8f1, 0x5, 0xeda, 0x10000, 0x4, 0x10001, 0x9, 0x2, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0x5, 0x80, 0x8e2, 0x80000000, 0x1, 0x5, 0x6, 0x7, 0x7, 0x6, 0x4, 0x9, 0x2, 0xb37, 0x159, 0x1000, 0x1, 0x10000, 0x800, 0xb56, 0x7ff, 0xdb, 0x0, 0x10000, 0xfffffffffffffffb, 0x8, 0x1000, 0x8, 0x7, 0x4, 0x3, 0x5, 0x2, 0x7fffffff, 0x8, 0x4, 0x2, 0x7, 0x5, 0xffffffff, 0x7, 0x7, 0x100000001, 0x1000000009, 0x3, 0x7]}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 81.435352][ T4113] loop2: detected capacity change from 0 to 264192 [ 81.442820][ T4115] 9pnet: Insufficient options for proto=fd [ 81.472577][ T4113] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 23:59:33 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r0 = socket(0x11, 0x3, 0x2) bind(r0, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}}) 23:59:33 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:33 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 81.504741][ T4121] loop4: detected capacity change from 0 to 264192 23:59:33 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) r3 = gettid() wait4(r3, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) tkill(r0, 0x2a) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={0x0, 0x8, 0x1, [0x7f, 0x628f, 0x10001, 0x1, 0x2], [0x4, 0x81, 0x7, 0xfffffffffffffffe, 0x1, 0x4fc6, 0x7, 0x7ff, 0x1, 0x7, 0x7, 0x5, 0x6d5d202d, 0x9, 0x80000001, 0x4, 0x8, 0x5, 0x10100000, 0xfa, 0x20, 0x4, 0x81, 0x69ab, 0x401, 0x3, 0x7, 0x43, 0xffffffff, 0xb14, 0x8, 0x1000000000, 0x4, 0x3, 0x3ff, 0x8, 0x5, 0x4, 0x8, 0xe2, 0x1000, 0x9, 0x4, 0x9, 0x5, 0x8, 0x6, 0x6, 0xe3, 0x6, 0x163451fd, 0xe0, 0x2, 0x2, 0xfffffffffffffff8, 0x8, 0x10000, 0x4, 0x3, 0x2, 0x2, 0x40, 0x8, 0xfffffffffffff8f1, 0x5, 0xeda, 0x10000, 0x4, 0x10001, 0x9, 0x2, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0x5, 0x80, 0x8e2, 0x80000000, 0x1, 0x5, 0x6, 0x7, 0x7, 0x6, 0x4, 0x9, 0x2, 0xb37, 0x159, 0x1000, 0x1, 0x10000, 0x800, 0xb56, 0x7ff, 0xdb, 0x0, 0x10000, 0xfffffffffffffffb, 0x8, 0x1000, 0x8, 0x7, 0x4, 0x3, 0x5, 0x2, 0x7fffffff, 0x8, 0x4, 0x2, 0x7, 0x5, 0xffffffff, 0x7, 0x7, 0x100000001, 0x1000000009, 0x3, 0x7]}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:33 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}}) 23:59:33 executing program 2: r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) [ 81.551119][ T4126] 9pnet: Insufficient options for proto=fd [ 81.562684][ T4121] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 81.638544][ T4135] 9pnet: Insufficient options for proto=fd 23:59:34 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:34 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:34 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}}) 23:59:34 executing program 4: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r3, r1, 0x0, 0xffffff04) 23:59:34 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) r3 = gettid() wait4(r3, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) tkill(r0, 0x2a) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={0x0, 0x8, 0x1, [0x7f, 0x628f, 0x10001, 0x1, 0x2], [0x4, 0x81, 0x7, 0xfffffffffffffffe, 0x1, 0x4fc6, 0x7, 0x7ff, 0x1, 0x7, 0x7, 0x5, 0x6d5d202d, 0x9, 0x80000001, 0x4, 0x8, 0x5, 0x10100000, 0xfa, 0x20, 0x4, 0x81, 0x69ab, 0x401, 0x3, 0x7, 0x43, 0xffffffff, 0xb14, 0x8, 0x1000000000, 0x4, 0x3, 0x3ff, 0x8, 0x5, 0x4, 0x8, 0xe2, 0x1000, 0x9, 0x4, 0x9, 0x5, 0x8, 0x6, 0x6, 0xe3, 0x6, 0x163451fd, 0xe0, 0x2, 0x2, 0xfffffffffffffff8, 0x8, 0x10000, 0x4, 0x3, 0x2, 0x2, 0x40, 0x8, 0xfffffffffffff8f1, 0x5, 0xeda, 0x10000, 0x4, 0x10001, 0x9, 0x2, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0x5, 0x80, 0x8e2, 0x80000000, 0x1, 0x5, 0x6, 0x7, 0x7, 0x6, 0x4, 0x9, 0x2, 0xb37, 0x159, 0x1000, 0x1, 0x10000, 0x800, 0xb56, 0x7ff, 0xdb, 0x0, 0x10000, 0xfffffffffffffffb, 0x8, 0x1000, 0x8, 0x7, 0x4, 0x3, 0x5, 0x2, 0x7fffffff, 0x8, 0x4, 0x2, 0x7, 0x5, 0xffffffff, 0x7, 0x7, 0x100000001, 0x1000000009, 0x3, 0x7]}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:34 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 82.358686][ T199] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 82.375845][ T4146] 9pnet: Insufficient options for proto=fd 23:59:34 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}}) [ 82.445109][ T4155] loop4: detected capacity change from 0 to 264192 [ 82.455371][ T4155] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 23:59:34 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) tkill(r0, 0x17) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:34 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:34 executing program 2: r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) 23:59:34 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) r3 = gettid() wait4(r3, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) tkill(r0, 0x2a) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={0x0, 0x8, 0x1, [0x7f, 0x628f, 0x10001, 0x1, 0x2], [0x4, 0x81, 0x7, 0xfffffffffffffffe, 0x1, 0x4fc6, 0x7, 0x7ff, 0x1, 0x7, 0x7, 0x5, 0x6d5d202d, 0x9, 0x80000001, 0x4, 0x8, 0x5, 0x10100000, 0xfa, 0x20, 0x4, 0x81, 0x69ab, 0x401, 0x3, 0x7, 0x43, 0xffffffff, 0xb14, 0x8, 0x1000000000, 0x4, 0x3, 0x3ff, 0x8, 0x5, 0x4, 0x8, 0xe2, 0x1000, 0x9, 0x4, 0x9, 0x5, 0x8, 0x6, 0x6, 0xe3, 0x6, 0x163451fd, 0xe0, 0x2, 0x2, 0xfffffffffffffff8, 0x8, 0x10000, 0x4, 0x3, 0x2, 0x2, 0x40, 0x8, 0xfffffffffffff8f1, 0x5, 0xeda, 0x10000, 0x4, 0x10001, 0x9, 0x2, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0x5, 0x80, 0x8e2, 0x80000000, 0x1, 0x5, 0x6, 0x7, 0x7, 0x6, 0x4, 0x9, 0x2, 0xb37, 0x159, 0x1000, 0x1, 0x10000, 0x800, 0xb56, 0x7ff, 0xdb, 0x0, 0x10000, 0xfffffffffffffffb, 0x8, 0x1000, 0x8, 0x7, 0x4, 0x3, 0x5, 0x2, 0x7fffffff, 0x8, 0x4, 0x2, 0x7, 0x5, 0xffffffff, 0x7, 0x7, 0x100000001, 0x1000000009, 0x3, 0x7]}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 82.492114][ T4137] syz-executor.2 (4137) used greatest stack depth: 10800 bytes left [ 82.515835][ T4157] 9pnet: Insufficient options for proto=fd 23:59:34 executing program 0: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r3, r1, 0x0, 0xffffff04) 23:59:34 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:34 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) tkill(r0, 0x17) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 82.625628][ T4174] loop0: detected capacity change from 0 to 264192 23:59:35 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) r3 = gettid() wait4(r3, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) tkill(r0, 0x2a) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={0x0, 0x8, 0x1, [0x7f, 0x628f, 0x10001, 0x1, 0x2], [0x4, 0x81, 0x7, 0xfffffffffffffffe, 0x1, 0x4fc6, 0x7, 0x7ff, 0x1, 0x7, 0x7, 0x5, 0x6d5d202d, 0x9, 0x80000001, 0x4, 0x8, 0x5, 0x10100000, 0xfa, 0x20, 0x4, 0x81, 0x69ab, 0x401, 0x3, 0x7, 0x43, 0xffffffff, 0xb14, 0x8, 0x1000000000, 0x4, 0x3, 0x3ff, 0x8, 0x5, 0x4, 0x8, 0xe2, 0x1000, 0x9, 0x4, 0x9, 0x5, 0x8, 0x6, 0x6, 0xe3, 0x6, 0x163451fd, 0xe0, 0x2, 0x2, 0xfffffffffffffff8, 0x8, 0x10000, 0x4, 0x3, 0x2, 0x2, 0x40, 0x8, 0xfffffffffffff8f1, 0x5, 0xeda, 0x10000, 0x4, 0x10001, 0x9, 0x2, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0x5, 0x80, 0x8e2, 0x80000000, 0x1, 0x5, 0x6, 0x7, 0x7, 0x6, 0x4, 0x9, 0x2, 0xb37, 0x159, 0x1000, 0x1, 0x10000, 0x800, 0xb56, 0x7ff, 0xdb, 0x0, 0x10000, 0xfffffffffffffffb, 0x8, 0x1000, 0x8, 0x7, 0x4, 0x3, 0x5, 0x2, 0x7fffffff, 0x8, 0x4, 0x2, 0x7, 0x5, 0xffffffff, 0x7, 0x7, 0x100000001, 0x1000000009, 0x3, 0x7]}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 82.683909][ T4174] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 23:59:35 executing program 4: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(0xffffffffffffffff, r1, 0x0, 0xffffff04) 23:59:35 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:35 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) r3 = gettid() wait4(r3, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) tkill(r0, 0x2a) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={0x0, 0x8, 0x1, [0x7f, 0x628f, 0x10001, 0x1, 0x2], [0x4, 0x81, 0x7, 0xfffffffffffffffe, 0x1, 0x4fc6, 0x7, 0x7ff, 0x1, 0x7, 0x7, 0x5, 0x6d5d202d, 0x9, 0x80000001, 0x4, 0x8, 0x5, 0x10100000, 0xfa, 0x20, 0x4, 0x81, 0x69ab, 0x401, 0x3, 0x7, 0x43, 0xffffffff, 0xb14, 0x8, 0x1000000000, 0x4, 0x3, 0x3ff, 0x8, 0x5, 0x4, 0x8, 0xe2, 0x1000, 0x9, 0x4, 0x9, 0x5, 0x8, 0x6, 0x6, 0xe3, 0x6, 0x163451fd, 0xe0, 0x2, 0x2, 0xfffffffffffffff8, 0x8, 0x10000, 0x4, 0x3, 0x2, 0x2, 0x40, 0x8, 0xfffffffffffff8f1, 0x5, 0xeda, 0x10000, 0x4, 0x10001, 0x9, 0x2, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0x5, 0x80, 0x8e2, 0x80000000, 0x1, 0x5, 0x6, 0x7, 0x7, 0x6, 0x4, 0x9, 0x2, 0xb37, 0x159, 0x1000, 0x1, 0x10000, 0x800, 0xb56, 0x7ff, 0xdb, 0x0, 0x10000, 0xfffffffffffffffb, 0x8, 0x1000, 0x8, 0x7, 0x4, 0x3, 0x5, 0x2, 0x7fffffff, 0x8, 0x4, 0x2, 0x7, 0x5, 0xffffffff, 0x7, 0x7, 0x100000001, 0x1000000009, 0x3, 0x7]}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:35 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) tkill(r0, 0x17) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 83.315665][ T199] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 23:59:35 executing program 2: r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) 23:59:35 executing program 3: ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x17) gettid() tkill(0x0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(0x0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:35 executing program 3: ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x17) gettid() tkill(0x0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(0x0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:35 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) r2 = gettid() wait4(r2, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) tkill(r0, 0x2a) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={0x0, 0x8, 0x1, [0x7f, 0x628f, 0x10001, 0x1, 0x2], [0x4, 0x81, 0x7, 0xfffffffffffffffe, 0x1, 0x4fc6, 0x7, 0x7ff, 0x1, 0x7, 0x7, 0x5, 0x6d5d202d, 0x9, 0x80000001, 0x4, 0x8, 0x5, 0x10100000, 0xfa, 0x20, 0x4, 0x81, 0x69ab, 0x401, 0x3, 0x7, 0x43, 0xffffffff, 0xb14, 0x8, 0x1000000000, 0x4, 0x3, 0x3ff, 0x8, 0x5, 0x4, 0x8, 0xe2, 0x1000, 0x9, 0x4, 0x9, 0x5, 0x8, 0x6, 0x6, 0xe3, 0x6, 0x163451fd, 0xe0, 0x2, 0x2, 0xfffffffffffffff8, 0x8, 0x10000, 0x4, 0x3, 0x2, 0x2, 0x40, 0x8, 0xfffffffffffff8f1, 0x5, 0xeda, 0x10000, 0x4, 0x10001, 0x9, 0x2, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0x5, 0x80, 0x8e2, 0x80000000, 0x1, 0x5, 0x6, 0x7, 0x7, 0x6, 0x4, 0x9, 0x2, 0xb37, 0x159, 0x1000, 0x1, 0x10000, 0x800, 0xb56, 0x7ff, 0xdb, 0x0, 0x10000, 0xfffffffffffffffb, 0x8, 0x1000, 0x8, 0x7, 0x4, 0x3, 0x5, 0x2, 0x7fffffff, 0x8, 0x4, 0x2, 0x7, 0x5, 0xffffffff, 0x7, 0x7, 0x100000001, 0x1000000009, 0x3, 0x7]}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 83.400353][ T4197] loop4: detected capacity change from 0 to 264192 [ 83.428730][ T4197] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 23:59:35 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 1) 23:59:35 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x17) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:35 executing program 3: ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x17) gettid() tkill(0x0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(0x0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:35 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) r2 = gettid() wait4(r2, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) tkill(r0, 0x2a) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={0x0, 0x8, 0x1, [0x7f, 0x628f, 0x10001, 0x1, 0x2], [0x4, 0x81, 0x7, 0xfffffffffffffffe, 0x1, 0x4fc6, 0x7, 0x7ff, 0x1, 0x7, 0x7, 0x5, 0x6d5d202d, 0x9, 0x80000001, 0x4, 0x8, 0x5, 0x10100000, 0xfa, 0x20, 0x4, 0x81, 0x69ab, 0x401, 0x3, 0x7, 0x43, 0xffffffff, 0xb14, 0x8, 0x1000000000, 0x4, 0x3, 0x3ff, 0x8, 0x5, 0x4, 0x8, 0xe2, 0x1000, 0x9, 0x4, 0x9, 0x5, 0x8, 0x6, 0x6, 0xe3, 0x6, 0x163451fd, 0xe0, 0x2, 0x2, 0xfffffffffffffff8, 0x8, 0x10000, 0x4, 0x3, 0x2, 0x2, 0x40, 0x8, 0xfffffffffffff8f1, 0x5, 0xeda, 0x10000, 0x4, 0x10001, 0x9, 0x2, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0x5, 0x80, 0x8e2, 0x80000000, 0x1, 0x5, 0x6, 0x7, 0x7, 0x6, 0x4, 0x9, 0x2, 0xb37, 0x159, 0x1000, 0x1, 0x10000, 0x800, 0xb56, 0x7ff, 0xdb, 0x0, 0x10000, 0xfffffffffffffffb, 0x8, 0x1000, 0x8, 0x7, 0x4, 0x3, 0x5, 0x2, 0x7fffffff, 0x8, 0x4, 0x2, 0x7, 0x5, 0xffffffff, 0x7, 0x7, 0x100000001, 0x1000000009, 0x3, 0x7]}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 83.594017][ T57] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 83.695817][ T4219] FAULT_INJECTION: forcing a failure. [ 83.695817][ T4219] name failslab, interval 1, probability 0, space 0, times 1 [ 83.708545][ T4219] CPU: 0 PID: 4219 Comm: syz-executor.0 Not tainted 5.15.0-rc6-syzkaller #0 [ 83.717220][ T4219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 83.727300][ T4219] Call Trace: [ 83.730585][ T4219] dump_stack_lvl+0xd6/0x122 [ 83.735189][ T4219] dump_stack+0x11/0x1b [ 83.739349][ T4219] should_fail+0x23c/0x250 [ 83.743823][ T4219] ? __se_sys_mount+0x4e/0x2f0 [ 83.748583][ T4219] __should_failslab+0x81/0x90 [ 83.753355][ T4219] should_failslab+0x5/0x20 [ 83.757857][ T4219] __kmalloc_track_caller+0x6d/0x350 [ 83.763141][ T4219] ? strnlen_user+0x137/0x1c0 [ 83.767912][ T4219] strndup_user+0x73/0x120 [ 83.772328][ T4219] __se_sys_mount+0x4e/0x2f0 [ 83.776949][ T4219] ? fput+0x2d/0x130 [ 83.780844][ T4219] ? ksys_write+0x162/0x190 [ 83.785351][ T4219] __x64_sys_mount+0x63/0x70 [ 83.789955][ T4219] do_syscall_64+0x44/0xa0 [ 83.794371][ T4219] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 83.800275][ T4219] RIP: 0033:0x7fa0e83dda39 [ 83.804680][ T4219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 83.824325][ T4219] RSP: 002b:00007fa0e6154188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 83.832735][ T4219] RAX: ffffffffffffffda RBX: 00007fa0e84e0f60 RCX: 00007fa0e83dda39 [ 83.840765][ T4219] RDX: 0000000020000080 RSI: 0000000020000300 RDI: 0000000000000000 [ 83.848784][ T4219] RBP: 00007fa0e61541d0 R08: 0000000020001e80 R09: 0000000000000000 [ 83.856844][ T4219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.864813][ T4219] R13: 00007fff114821bf R14: 00007fa0e6154300 R15: 0000000000022000 23:59:36 executing program 4: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(0xffffffffffffffff, r1, 0x0, 0xffffff04) 23:59:36 executing program 3: r0 = clone3(0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:36 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) r2 = gettid() wait4(r2, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) tkill(r0, 0x2a) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={0x0, 0x8, 0x1, [0x7f, 0x628f, 0x10001, 0x1, 0x2], [0x4, 0x81, 0x7, 0xfffffffffffffffe, 0x1, 0x4fc6, 0x7, 0x7ff, 0x1, 0x7, 0x7, 0x5, 0x6d5d202d, 0x9, 0x80000001, 0x4, 0x8, 0x5, 0x10100000, 0xfa, 0x20, 0x4, 0x81, 0x69ab, 0x401, 0x3, 0x7, 0x43, 0xffffffff, 0xb14, 0x8, 0x1000000000, 0x4, 0x3, 0x3ff, 0x8, 0x5, 0x4, 0x8, 0xe2, 0x1000, 0x9, 0x4, 0x9, 0x5, 0x8, 0x6, 0x6, 0xe3, 0x6, 0x163451fd, 0xe0, 0x2, 0x2, 0xfffffffffffffff8, 0x8, 0x10000, 0x4, 0x3, 0x2, 0x2, 0x40, 0x8, 0xfffffffffffff8f1, 0x5, 0xeda, 0x10000, 0x4, 0x10001, 0x9, 0x2, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0x5, 0x80, 0x8e2, 0x80000000, 0x1, 0x5, 0x6, 0x7, 0x7, 0x6, 0x4, 0x9, 0x2, 0xb37, 0x159, 0x1000, 0x1, 0x10000, 0x800, 0xb56, 0x7ff, 0xdb, 0x0, 0x10000, 0xfffffffffffffffb, 0x8, 0x1000, 0x8, 0x7, 0x4, 0x3, 0x5, 0x2, 0x7fffffff, 0x8, 0x4, 0x2, 0x7, 0x5, 0xffffffff, 0x7, 0x7, 0x100000001, 0x1000000009, 0x3, 0x7]}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:36 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x17) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:36 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 2) 23:59:36 executing program 3: r0 = clone3(0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:36 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x17) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:36 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) [ 84.256473][ T57] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 84.320423][ T4230] FAULT_INJECTION: forcing a failure. [ 84.320423][ T4230] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 84.333542][ T4230] CPU: 0 PID: 4230 Comm: syz-executor.0 Not tainted 5.15.0-rc6-syzkaller #0 [ 84.342214][ T4230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 84.349482][ T4233] loop4: detected capacity change from 0 to 264192 [ 84.352264][ T4230] Call Trace: [ 84.352272][ T4230] dump_stack_lvl+0xd6/0x122 [ 84.366592][ T4230] dump_stack+0x11/0x1b [ 84.370859][ T4230] should_fail+0x23c/0x250 [ 84.375303][ T4230] should_fail_usercopy+0x16/0x20 [ 84.380313][ T4230] _copy_from_user+0x1c/0xd0 [ 84.385001][ T4230] strndup_user+0xb0/0x120 [ 84.389419][ T4230] __se_sys_mount+0x4e/0x2f0 [ 84.394067][ T4230] ? fput+0x2d/0x130 [ 84.398017][ T4230] ? ksys_write+0x162/0x190 [ 84.402550][ T4230] __x64_sys_mount+0x63/0x70 [ 84.407132][ T4230] do_syscall_64+0x44/0xa0 [ 84.411604][ T4230] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 84.417565][ T4230] RIP: 0033:0x7fa0e83dda39 [ 84.421963][ T4230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 84.441597][ T4230] RSP: 002b:00007fa0e6154188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 84.449993][ T4230] RAX: ffffffffffffffda RBX: 00007fa0e84e0f60 RCX: 00007fa0e83dda39 [ 84.457945][ T4230] RDX: 0000000020000080 RSI: 0000000020000300 RDI: 0000000000000000 23:59:36 executing program 3: r0 = clone3(0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 84.465898][ T4230] RBP: 00007fa0e61541d0 R08: 0000000020001e80 R09: 0000000000000000 [ 84.473947][ T4230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.481898][ T4230] R13: 00007fff114821bf R14: 00007fa0e6154300 R15: 0000000000022000 [ 84.495066][ T4233] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 23:59:36 executing program 5: ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x17) r0 = gettid() wait4(r0, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) tkill(0x0, 0x2a) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={0x0, 0x8, 0x1, [0x7f, 0x628f, 0x10001, 0x1, 0x2], [0x4, 0x81, 0x7, 0xfffffffffffffffe, 0x1, 0x4fc6, 0x7, 0x7ff, 0x1, 0x7, 0x7, 0x5, 0x6d5d202d, 0x9, 0x80000001, 0x4, 0x8, 0x5, 0x10100000, 0xfa, 0x20, 0x4, 0x81, 0x69ab, 0x401, 0x3, 0x7, 0x43, 0xffffffff, 0xb14, 0x8, 0x1000000000, 0x4, 0x3, 0x3ff, 0x8, 0x5, 0x4, 0x8, 0xe2, 0x1000, 0x9, 0x4, 0x9, 0x5, 0x8, 0x6, 0x6, 0xe3, 0x6, 0x163451fd, 0xe0, 0x2, 0x2, 0xfffffffffffffff8, 0x8, 0x10000, 0x4, 0x3, 0x2, 0x2, 0x40, 0x8, 0xfffffffffffff8f1, 0x5, 0xeda, 0x10000, 0x4, 0x10001, 0x9, 0x2, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0x5, 0x80, 0x8e2, 0x80000000, 0x1, 0x5, 0x6, 0x7, 0x7, 0x6, 0x4, 0x9, 0x2, 0xb37, 0x159, 0x1000, 0x1, 0x10000, 0x800, 0xb56, 0x7ff, 0xdb, 0x0, 0x10000, 0xfffffffffffffffb, 0x8, 0x1000, 0x8, 0x7, 0x4, 0x3, 0x5, 0x2, 0x7fffffff, 0x8, 0x4, 0x2, 0x7, 0x5, 0xffffffff, 0x7, 0x7, 0x100000001, 0x1000000009, 0x3, 0x7]}) wait4(0x0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:36 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x0, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:36 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 3) [ 84.519854][ T4236] loop2: detected capacity change from 0 to 264192 [ 84.585700][ T4246] FAULT_INJECTION: forcing a failure. [ 84.585700][ T4246] name failslab, interval 1, probability 0, space 0, times 0 [ 84.598350][ T4246] CPU: 1 PID: 4246 Comm: syz-executor.0 Not tainted 5.15.0-rc6-syzkaller #0 [ 84.607076][ T4246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 84.617124][ T4246] Call Trace: [ 84.620403][ T4246] dump_stack_lvl+0xd6/0x122 [ 84.624989][ T4246] dump_stack+0x11/0x1b [ 84.629240][ T4246] should_fail+0x23c/0x250 [ 84.633662][ T4246] __should_failslab+0x81/0x90 [ 84.638451][ T4246] ? __se_sys_mount+0xf7/0x2f0 [ 84.643241][ T4246] should_failslab+0x5/0x20 [ 84.647743][ T4246] kmem_cache_alloc_trace+0x52/0x320 [ 84.653024][ T4246] ? _copy_from_user+0x94/0xd0 [ 84.657793][ T4246] __se_sys_mount+0xf7/0x2f0 [ 84.662392][ T4246] ? fput+0x2d/0x130 [ 84.666355][ T4246] ? ksys_write+0x162/0x190 [ 84.670863][ T4246] __x64_sys_mount+0x63/0x70 [ 84.675449][ T4246] do_syscall_64+0x44/0xa0 [ 84.679907][ T4246] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 84.685808][ T4246] RIP: 0033:0x7fa0e83dda39 [ 84.690242][ T4246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 84.709957][ T4246] RSP: 002b:00007fa0e6154188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 84.718363][ T4246] RAX: ffffffffffffffda RBX: 00007fa0e84e0f60 RCX: 00007fa0e83dda39 [ 84.726313][ T4246] RDX: 0000000020000080 RSI: 0000000020000300 RDI: 0000000000000000 [ 84.734279][ T4246] RBP: 00007fa0e61541d0 R08: 0000000020001e80 R09: 0000000000000000 [ 84.742239][ T4246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.750203][ T4246] R13: 00007fff114821bf R14: 00007fa0e6154300 R15: 0000000000022000 23:59:37 executing program 5: ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x17) r0 = gettid() wait4(r0, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) tkill(0x0, 0x2a) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={0x0, 0x8, 0x1, [0x7f, 0x628f, 0x10001, 0x1, 0x2], [0x4, 0x81, 0x7, 0xfffffffffffffffe, 0x1, 0x4fc6, 0x7, 0x7ff, 0x1, 0x7, 0x7, 0x5, 0x6d5d202d, 0x9, 0x80000001, 0x4, 0x8, 0x5, 0x10100000, 0xfa, 0x20, 0x4, 0x81, 0x69ab, 0x401, 0x3, 0x7, 0x43, 0xffffffff, 0xb14, 0x8, 0x1000000000, 0x4, 0x3, 0x3ff, 0x8, 0x5, 0x4, 0x8, 0xe2, 0x1000, 0x9, 0x4, 0x9, 0x5, 0x8, 0x6, 0x6, 0xe3, 0x6, 0x163451fd, 0xe0, 0x2, 0x2, 0xfffffffffffffff8, 0x8, 0x10000, 0x4, 0x3, 0x2, 0x2, 0x40, 0x8, 0xfffffffffffff8f1, 0x5, 0xeda, 0x10000, 0x4, 0x10001, 0x9, 0x2, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0x5, 0x80, 0x8e2, 0x80000000, 0x1, 0x5, 0x6, 0x7, 0x7, 0x6, 0x4, 0x9, 0x2, 0xb37, 0x159, 0x1000, 0x1, 0x10000, 0x800, 0xb56, 0x7ff, 0xdb, 0x0, 0x10000, 0xfffffffffffffffb, 0x8, 0x1000, 0x8, 0x7, 0x4, 0x3, 0x5, 0x2, 0x7fffffff, 0x8, 0x4, 0x2, 0x7, 0x5, 0xffffffff, 0x7, 0x7, 0x100000001, 0x1000000009, 0x3, 0x7]}) wait4(0x0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:37 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x17) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:37 executing program 4: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(0xffffffffffffffff, r1, 0x0, 0xffffff04) 23:59:37 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x0, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:37 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 4) 23:59:37 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) [ 85.202891][ T4255] loop2: detected capacity change from 0 to 264192 [ 85.215191][ T4257] FAULT_INJECTION: forcing a failure. [ 85.215191][ T4257] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 85.228314][ T4257] CPU: 0 PID: 4257 Comm: syz-executor.0 Not tainted 5.15.0-rc6-syzkaller #0 [ 85.237055][ T4257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 85.247106][ T4257] Call Trace: [ 85.250375][ T4257] dump_stack_lvl+0xd6/0x122 [ 85.255025][ T4257] dump_stack+0x11/0x1b [ 85.259168][ T4257] should_fail+0x23c/0x250 [ 85.263595][ T4257] should_fail_usercopy+0x16/0x20 [ 85.268623][ T4257] _copy_from_user+0x1c/0xd0 [ 85.273243][ T4257] __se_sys_mount+0x119/0x2f0 [ 85.277916][ T4257] ? fput+0x2d/0x130 [ 85.281808][ T4257] ? ksys_write+0x162/0x190 [ 85.286300][ T4257] __x64_sys_mount+0x63/0x70 [ 85.290933][ T4257] do_syscall_64+0x44/0xa0 [ 85.295343][ T4257] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 85.301259][ T4257] RIP: 0033:0x7fa0e83dda39 [ 85.305695][ T4257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 85.325306][ T4257] RSP: 002b:00007fa0e6154188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 85.333706][ T4257] RAX: ffffffffffffffda RBX: 00007fa0e84e0f60 RCX: 00007fa0e83dda39 [ 85.341733][ T4257] RDX: 0000000020000080 RSI: 0000000020000300 RDI: 0000000000000000 23:59:37 executing program 5: ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x17) r0 = gettid() wait4(r0, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) tkill(0x0, 0x2a) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={0x0, 0x8, 0x1, [0x7f, 0x628f, 0x10001, 0x1, 0x2], [0x4, 0x81, 0x7, 0xfffffffffffffffe, 0x1, 0x4fc6, 0x7, 0x7ff, 0x1, 0x7, 0x7, 0x5, 0x6d5d202d, 0x9, 0x80000001, 0x4, 0x8, 0x5, 0x10100000, 0xfa, 0x20, 0x4, 0x81, 0x69ab, 0x401, 0x3, 0x7, 0x43, 0xffffffff, 0xb14, 0x8, 0x1000000000, 0x4, 0x3, 0x3ff, 0x8, 0x5, 0x4, 0x8, 0xe2, 0x1000, 0x9, 0x4, 0x9, 0x5, 0x8, 0x6, 0x6, 0xe3, 0x6, 0x163451fd, 0xe0, 0x2, 0x2, 0xfffffffffffffff8, 0x8, 0x10000, 0x4, 0x3, 0x2, 0x2, 0x40, 0x8, 0xfffffffffffff8f1, 0x5, 0xeda, 0x10000, 0x4, 0x10001, 0x9, 0x2, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0x5, 0x80, 0x8e2, 0x80000000, 0x1, 0x5, 0x6, 0x7, 0x7, 0x6, 0x4, 0x9, 0x2, 0xb37, 0x159, 0x1000, 0x1, 0x10000, 0x800, 0xb56, 0x7ff, 0xdb, 0x0, 0x10000, 0xfffffffffffffffb, 0x8, 0x1000, 0x8, 0x7, 0x4, 0x3, 0x5, 0x2, 0x7fffffff, 0x8, 0x4, 0x2, 0x7, 0x5, 0xffffffff, 0x7, 0x7, 0x100000001, 0x1000000009, 0x3, 0x7]}) wait4(0x0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:37 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x17) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 85.349735][ T4257] RBP: 00007fa0e61541d0 R08: 0000000020001e80 R09: 0000000000000000 [ 85.357690][ T4257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.365730][ T4257] R13: 00007fff114821bf R14: 00007fa0e6154300 R15: 0000000000022000 23:59:37 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x0, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:37 executing program 5: r0 = clone3(0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) r1 = gettid() wait4(r1, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) tkill(r0, 0x2a) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={0x0, 0x8, 0x1, [0x7f, 0x628f, 0x10001, 0x1, 0x2], [0x4, 0x81, 0x7, 0xfffffffffffffffe, 0x1, 0x4fc6, 0x7, 0x7ff, 0x1, 0x7, 0x7, 0x5, 0x6d5d202d, 0x9, 0x80000001, 0x4, 0x8, 0x5, 0x10100000, 0xfa, 0x20, 0x4, 0x81, 0x69ab, 0x401, 0x3, 0x7, 0x43, 0xffffffff, 0xb14, 0x8, 0x1000000000, 0x4, 0x3, 0x3ff, 0x8, 0x5, 0x4, 0x8, 0xe2, 0x1000, 0x9, 0x4, 0x9, 0x5, 0x8, 0x6, 0x6, 0xe3, 0x6, 0x163451fd, 0xe0, 0x2, 0x2, 0xfffffffffffffff8, 0x8, 0x10000, 0x4, 0x3, 0x2, 0x2, 0x40, 0x8, 0xfffffffffffff8f1, 0x5, 0xeda, 0x10000, 0x4, 0x10001, 0x9, 0x2, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0x5, 0x80, 0x8e2, 0x80000000, 0x1, 0x5, 0x6, 0x7, 0x7, 0x6, 0x4, 0x9, 0x2, 0xb37, 0x159, 0x1000, 0x1, 0x10000, 0x800, 0xb56, 0x7ff, 0xdb, 0x0, 0x10000, 0xfffffffffffffffb, 0x8, 0x1000, 0x8, 0x7, 0x4, 0x3, 0x5, 0x2, 0x7fffffff, 0x8, 0x4, 0x2, 0x7, 0x5, 0xffffffff, 0x7, 0x7, 0x100000001, 0x1000000009, 0x3, 0x7]}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:37 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 5) 23:59:37 executing program 5: r0 = clone3(0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) r1 = gettid() wait4(r1, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) tkill(r0, 0x2a) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={0x0, 0x8, 0x1, [0x7f, 0x628f, 0x10001, 0x1, 0x2], [0x4, 0x81, 0x7, 0xfffffffffffffffe, 0x1, 0x4fc6, 0x7, 0x7ff, 0x1, 0x7, 0x7, 0x5, 0x6d5d202d, 0x9, 0x80000001, 0x4, 0x8, 0x5, 0x10100000, 0xfa, 0x20, 0x4, 0x81, 0x69ab, 0x401, 0x3, 0x7, 0x43, 0xffffffff, 0xb14, 0x8, 0x1000000000, 0x4, 0x3, 0x3ff, 0x8, 0x5, 0x4, 0x8, 0xe2, 0x1000, 0x9, 0x4, 0x9, 0x5, 0x8, 0x6, 0x6, 0xe3, 0x6, 0x163451fd, 0xe0, 0x2, 0x2, 0xfffffffffffffff8, 0x8, 0x10000, 0x4, 0x3, 0x2, 0x2, 0x40, 0x8, 0xfffffffffffff8f1, 0x5, 0xeda, 0x10000, 0x4, 0x10001, 0x9, 0x2, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0x5, 0x80, 0x8e2, 0x80000000, 0x1, 0x5, 0x6, 0x7, 0x7, 0x6, 0x4, 0x9, 0x2, 0xb37, 0x159, 0x1000, 0x1, 0x10000, 0x800, 0xb56, 0x7ff, 0xdb, 0x0, 0x10000, 0xfffffffffffffffb, 0x8, 0x1000, 0x8, 0x7, 0x4, 0x3, 0x5, 0x2, 0x7fffffff, 0x8, 0x4, 0x2, 0x7, 0x5, 0xffffffff, 0x7, 0x7, 0x100000001, 0x1000000009, 0x3, 0x7]}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 85.467615][ T4274] loop4: detected capacity change from 0 to 264192 [ 85.480836][ T4274] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 23:59:37 executing program 5: r0 = clone3(0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) r1 = gettid() wait4(r1, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) tkill(r0, 0x2a) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={0x0, 0x8, 0x1, [0x7f, 0x628f, 0x10001, 0x1, 0x2], [0x4, 0x81, 0x7, 0xfffffffffffffffe, 0x1, 0x4fc6, 0x7, 0x7ff, 0x1, 0x7, 0x7, 0x5, 0x6d5d202d, 0x9, 0x80000001, 0x4, 0x8, 0x5, 0x10100000, 0xfa, 0x20, 0x4, 0x81, 0x69ab, 0x401, 0x3, 0x7, 0x43, 0xffffffff, 0xb14, 0x8, 0x1000000000, 0x4, 0x3, 0x3ff, 0x8, 0x5, 0x4, 0x8, 0xe2, 0x1000, 0x9, 0x4, 0x9, 0x5, 0x8, 0x6, 0x6, 0xe3, 0x6, 0x163451fd, 0xe0, 0x2, 0x2, 0xfffffffffffffff8, 0x8, 0x10000, 0x4, 0x3, 0x2, 0x2, 0x40, 0x8, 0xfffffffffffff8f1, 0x5, 0xeda, 0x10000, 0x4, 0x10001, 0x9, 0x2, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0x5, 0x80, 0x8e2, 0x80000000, 0x1, 0x5, 0x6, 0x7, 0x7, 0x6, 0x4, 0x9, 0x2, 0xb37, 0x159, 0x1000, 0x1, 0x10000, 0x800, 0xb56, 0x7ff, 0xdb, 0x0, 0x10000, 0xfffffffffffffffb, 0x8, 0x1000, 0x8, 0x7, 0x4, 0x3, 0x5, 0x2, 0x7fffffff, 0x8, 0x4, 0x2, 0x7, 0x5, 0xffffffff, 0x7, 0x7, 0x100000001, 0x1000000009, 0x3, 0x7]}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 85.510233][ T4276] FAULT_INJECTION: forcing a failure. [ 85.510233][ T4276] name failslab, interval 1, probability 0, space 0, times 0 [ 85.522893][ T4276] CPU: 1 PID: 4276 Comm: syz-executor.0 Not tainted 5.15.0-rc6-syzkaller #0 [ 85.531563][ T4276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 85.541614][ T4276] Call Trace: [ 85.544945][ T4276] dump_stack_lvl+0xd6/0x122 [ 85.549590][ T4276] dump_stack+0x11/0x1b [ 85.553734][ T4276] should_fail+0x23c/0x250 23:59:37 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x17) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 85.558201][ T4276] ? getname_flags+0x84/0x3f0 [ 85.562883][ T4276] __should_failslab+0x81/0x90 [ 85.567650][ T4276] should_failslab+0x5/0x20 [ 85.572205][ T4276] kmem_cache_alloc+0x4f/0x300 [ 85.576966][ T4276] getname_flags+0x84/0x3f0 [ 85.581564][ T4276] user_path_at_empty+0x28/0x110 [ 85.586506][ T4276] __se_sys_mount+0x217/0x2f0 [ 85.591297][ T4276] ? fput+0x2d/0x130 [ 85.595303][ T4276] __x64_sys_mount+0x63/0x70 [ 85.599905][ T4276] do_syscall_64+0x44/0xa0 [ 85.604350][ T4276] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 85.610350][ T4276] RIP: 0033:0x7fa0e83dda39 [ 85.614770][ T4276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 85.634365][ T4276] RSP: 002b:00007fa0e6154188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 85.642772][ T4276] RAX: ffffffffffffffda RBX: 00007fa0e84e0f60 RCX: 00007fa0e83dda39 [ 85.650871][ T4276] RDX: 0000000020000080 RSI: 0000000020000300 RDI: 0000000000000000 [ 85.658845][ T4276] RBP: 00007fa0e61541d0 R08: 0000000020001e80 R09: 0000000000000000 [ 85.666854][ T4276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.674988][ T4276] R13: 00007fff114821bf R14: 00007fa0e6154300 R15: 0000000000022000 23:59:38 executing program 4: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r2, r1, 0x0, 0xffffff04) 23:59:38 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:38 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x0) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:38 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x0, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) r2 = gettid() wait4(r2, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) tkill(r0, 0x2a) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={0x0, 0x8, 0x1, [0x7f, 0x628f, 0x10001, 0x1, 0x2], [0x4, 0x81, 0x7, 0xfffffffffffffffe, 0x1, 0x4fc6, 0x7, 0x7ff, 0x1, 0x7, 0x7, 0x5, 0x6d5d202d, 0x9, 0x80000001, 0x4, 0x8, 0x5, 0x10100000, 0xfa, 0x20, 0x4, 0x81, 0x69ab, 0x401, 0x3, 0x7, 0x43, 0xffffffff, 0xb14, 0x8, 0x1000000000, 0x4, 0x3, 0x3ff, 0x8, 0x5, 0x4, 0x8, 0xe2, 0x1000, 0x9, 0x4, 0x9, 0x5, 0x8, 0x6, 0x6, 0xe3, 0x6, 0x163451fd, 0xe0, 0x2, 0x2, 0xfffffffffffffff8, 0x8, 0x10000, 0x4, 0x3, 0x2, 0x2, 0x40, 0x8, 0xfffffffffffff8f1, 0x5, 0xeda, 0x10000, 0x4, 0x10001, 0x9, 0x2, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0x5, 0x80, 0x8e2, 0x80000000, 0x1, 0x5, 0x6, 0x7, 0x7, 0x6, 0x4, 0x9, 0x2, 0xb37, 0x159, 0x1000, 0x1, 0x10000, 0x800, 0xb56, 0x7ff, 0xdb, 0x0, 0x10000, 0xfffffffffffffffb, 0x8, 0x1000, 0x8, 0x7, 0x4, 0x3, 0x5, 0x2, 0x7fffffff, 0x8, 0x4, 0x2, 0x7, 0x5, 0xffffffff, 0x7, 0x7, 0x100000001, 0x1000000009, 0x3, 0x7]}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:38 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 6) 23:59:38 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba868012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) [ 86.323714][ T4293] loop2: detected capacity change from 0 to 264192 [ 86.331061][ T4296] FAULT_INJECTION: forcing a failure. [ 86.331061][ T4296] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 86.336253][ T199] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 86.344180][ T4296] CPU: 1 PID: 4296 Comm: syz-executor.0 Not tainted 5.15.0-rc6-syzkaller #0 [ 86.361783][ T4296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 86.371825][ T4296] Call Trace: [ 86.375094][ T4296] dump_stack_lvl+0xd6/0x122 [ 86.379794][ T4296] dump_stack+0x11/0x1b [ 86.384007][ T4296] should_fail+0x23c/0x250 [ 86.388415][ T4296] should_fail_usercopy+0x16/0x20 [ 86.393432][ T4296] strncpy_from_user+0x21/0x250 [ 86.398350][ T4296] getname_flags+0xb8/0x3f0 [ 86.402927][ T4296] user_path_at_empty+0x28/0x110 [ 86.407870][ T4296] __se_sys_mount+0x217/0x2f0 [ 86.412658][ T4296] ? fput+0x2d/0x130 [ 86.416546][ T4296] __x64_sys_mount+0x63/0x70 23:59:38 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 86.421171][ T4296] do_syscall_64+0x44/0xa0 [ 86.425595][ T4296] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 86.431517][ T4296] RIP: 0033:0x7fa0e83dda39 [ 86.435985][ T4296] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 86.455584][ T4296] RSP: 002b:00007fa0e6154188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 86.464000][ T4296] RAX: ffffffffffffffda RBX: 00007fa0e84e0f60 RCX: 00007fa0e83dda39 23:59:38 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x0, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) r2 = gettid() wait4(r2, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) tkill(r0, 0x2a) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={0x0, 0x8, 0x1, [0x7f, 0x628f, 0x10001, 0x1, 0x2], [0x4, 0x81, 0x7, 0xfffffffffffffffe, 0x1, 0x4fc6, 0x7, 0x7ff, 0x1, 0x7, 0x7, 0x5, 0x6d5d202d, 0x9, 0x80000001, 0x4, 0x8, 0x5, 0x10100000, 0xfa, 0x20, 0x4, 0x81, 0x69ab, 0x401, 0x3, 0x7, 0x43, 0xffffffff, 0xb14, 0x8, 0x1000000000, 0x4, 0x3, 0x3ff, 0x8, 0x5, 0x4, 0x8, 0xe2, 0x1000, 0x9, 0x4, 0x9, 0x5, 0x8, 0x6, 0x6, 0xe3, 0x6, 0x163451fd, 0xe0, 0x2, 0x2, 0xfffffffffffffff8, 0x8, 0x10000, 0x4, 0x3, 0x2, 0x2, 0x40, 0x8, 0xfffffffffffff8f1, 0x5, 0xeda, 0x10000, 0x4, 0x10001, 0x9, 0x2, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0x5, 0x80, 0x8e2, 0x80000000, 0x1, 0x5, 0x6, 0x7, 0x7, 0x6, 0x4, 0x9, 0x2, 0xb37, 0x159, 0x1000, 0x1, 0x10000, 0x800, 0xb56, 0x7ff, 0xdb, 0x0, 0x10000, 0xfffffffffffffffb, 0x8, 0x1000, 0x8, 0x7, 0x4, 0x3, 0x5, 0x2, 0x7fffffff, 0x8, 0x4, 0x2, 0x7, 0x5, 0xffffffff, 0x7, 0x7, 0x100000001, 0x1000000009, 0x3, 0x7]}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:38 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:38 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x0) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 86.471956][ T4296] RDX: 0000000020000080 RSI: 0000000020000300 RDI: 0000000000000000 [ 86.479986][ T4296] RBP: 00007fa0e61541d0 R08: 0000000020001e80 R09: 0000000000000000 [ 86.488091][ T4296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.496047][ T4296] R13: 00007fff114821bf R14: 00007fa0e6154300 R15: 0000000000022000 23:59:38 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x0, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) r2 = gettid() wait4(r2, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) tkill(r0, 0x2a) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={0x0, 0x8, 0x1, [0x7f, 0x628f, 0x10001, 0x1, 0x2], [0x4, 0x81, 0x7, 0xfffffffffffffffe, 0x1, 0x4fc6, 0x7, 0x7ff, 0x1, 0x7, 0x7, 0x5, 0x6d5d202d, 0x9, 0x80000001, 0x4, 0x8, 0x5, 0x10100000, 0xfa, 0x20, 0x4, 0x81, 0x69ab, 0x401, 0x3, 0x7, 0x43, 0xffffffff, 0xb14, 0x8, 0x1000000000, 0x4, 0x3, 0x3ff, 0x8, 0x5, 0x4, 0x8, 0xe2, 0x1000, 0x9, 0x4, 0x9, 0x5, 0x8, 0x6, 0x6, 0xe3, 0x6, 0x163451fd, 0xe0, 0x2, 0x2, 0xfffffffffffffff8, 0x8, 0x10000, 0x4, 0x3, 0x2, 0x2, 0x40, 0x8, 0xfffffffffffff8f1, 0x5, 0xeda, 0x10000, 0x4, 0x10001, 0x9, 0x2, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0x5, 0x80, 0x8e2, 0x80000000, 0x1, 0x5, 0x6, 0x7, 0x7, 0x6, 0x4, 0x9, 0x2, 0xb37, 0x159, 0x1000, 0x1, 0x10000, 0x800, 0xb56, 0x7ff, 0xdb, 0x0, 0x10000, 0xfffffffffffffffb, 0x8, 0x1000, 0x8, 0x7, 0x4, 0x3, 0x5, 0x2, 0x7fffffff, 0x8, 0x4, 0x2, 0x7, 0x5, 0xffffffff, 0x7, 0x7, 0x100000001, 0x1000000009, 0x3, 0x7]}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:38 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 7) [ 86.595418][ T4314] loop4: detected capacity change from 0 to 264192 [ 86.602333][ T4313] FAULT_INJECTION: forcing a failure. [ 86.602333][ T4313] name failslab, interval 1, probability 0, space 0, times 0 [ 86.615012][ T4313] CPU: 1 PID: 4313 Comm: syz-executor.0 Not tainted 5.15.0-rc6-syzkaller #0 [ 86.623681][ T4313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 86.633727][ T4313] Call Trace: [ 86.637003][ T4313] dump_stack_lvl+0xd6/0x122 [ 86.641591][ T4313] dump_stack+0x11/0x1b [ 86.645867][ T4313] should_fail+0x23c/0x250 [ 86.650287][ T4313] __should_failslab+0x81/0x90 [ 86.655064][ T4313] ? alloc_fs_context+0x46/0x500 [ 86.660002][ T4313] should_failslab+0x5/0x20 [ 86.664529][ T4313] kmem_cache_alloc_trace+0x52/0x320 [ 86.669809][ T4313] alloc_fs_context+0x46/0x500 [ 86.674567][ T4313] ? strncmp+0x34/0x70 [ 86.678627][ T4313] fs_context_for_mount+0x1d/0x20 [ 86.683637][ T4313] path_mount+0xe0d/0x1d20 [ 86.688042][ T4313] __se_sys_mount+0x24b/0x2f0 [ 86.692762][ T4313] ? fput+0x2d/0x130 [ 86.696641][ T4313] __x64_sys_mount+0x63/0x70 [ 86.701243][ T4313] do_syscall_64+0x44/0xa0 [ 86.705690][ T4313] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 86.711577][ T4313] RIP: 0033:0x7fa0e83dda39 [ 86.715984][ T4313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 86.735632][ T4313] RSP: 002b:00007fa0e6154188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 86.744082][ T4313] RAX: ffffffffffffffda RBX: 00007fa0e84e0f60 RCX: 00007fa0e83dda39 [ 86.752036][ T4313] RDX: 0000000020000080 RSI: 0000000020000300 RDI: 0000000000000000 [ 86.760231][ T4313] RBP: 00007fa0e61541d0 R08: 0000000020001e80 R09: 0000000000000000 [ 86.768190][ T4313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.776152][ T4313] R13: 00007fff114821bf R14: 00007fa0e6154300 R15: 0000000000022000 23:59:39 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x501c5400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) r1 = gettid() wait4(r1, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) tkill(r0, 0x2a) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={0x0, 0x8, 0x1, [0x7f, 0x628f, 0x10001, 0x1, 0x2], [0x4, 0x81, 0x7, 0xfffffffffffffffe, 0x1, 0x4fc6, 0x7, 0x7ff, 0x1, 0x7, 0x7, 0x5, 0x6d5d202d, 0x9, 0x80000001, 0x4, 0x8, 0x5, 0x10100000, 0xfa, 0x20, 0x4, 0x81, 0x69ab, 0x401, 0x3, 0x7, 0x43, 0xffffffff, 0xb14, 0x8, 0x1000000000, 0x4, 0x3, 0x3ff, 0x8, 0x5, 0x4, 0x8, 0xe2, 0x1000, 0x9, 0x4, 0x9, 0x5, 0x8, 0x6, 0x6, 0xe3, 0x6, 0x163451fd, 0xe0, 0x2, 0x2, 0xfffffffffffffff8, 0x8, 0x10000, 0x4, 0x3, 0x2, 0x2, 0x40, 0x8, 0xfffffffffffff8f1, 0x5, 0xeda, 0x10000, 0x4, 0x10001, 0x9, 0x2, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0x5, 0x80, 0x8e2, 0x80000000, 0x1, 0x5, 0x6, 0x7, 0x7, 0x6, 0x4, 0x9, 0x2, 0xb37, 0x159, 0x1000, 0x1, 0x10000, 0x800, 0xb56, 0x7ff, 0xdb, 0x0, 0x10000, 0xfffffffffffffffb, 0x8, 0x1000, 0x8, 0x7, 0x4, 0x3, 0x5, 0x2, 0x7fffffff, 0x8, 0x4, 0x2, 0x7, 0x5, 0xffffffff, 0x7, 0x7, 0x100000001, 0x1000000009, 0x3, 0x7]}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:39 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:39 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 8) 23:59:39 executing program 4: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r2, r1, 0x0, 0xffffff04) 23:59:39 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x0) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 86.832523][ T4314] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 86.889811][ T4324] FAULT_INJECTION: forcing a failure. [ 86.889811][ T4324] name failslab, interval 1, probability 0, space 0, times 0 [ 86.902500][ T4324] CPU: 0 PID: 4324 Comm: syz-executor.0 Not tainted 5.15.0-rc6-syzkaller #0 [ 86.911167][ T4324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 86.921281][ T4324] Call Trace: [ 86.924556][ T4324] dump_stack_lvl+0xd6/0x122 [ 86.929228][ T4324] dump_stack+0x11/0x1b [ 86.933377][ T4324] should_fail+0x23c/0x250 [ 86.937817][ T4324] __should_failslab+0x81/0x90 [ 86.942690][ T4324] ? legacy_init_fs_context+0x2d/0x70 [ 86.948121][ T4324] should_failslab+0x5/0x20 [ 86.952611][ T4324] kmem_cache_alloc_trace+0x52/0x320 [ 86.957880][ T4324] ? alloc_fs_context+0x46/0x500 [ 86.962857][ T4324] legacy_init_fs_context+0x2d/0x70 [ 86.968059][ T4324] alloc_fs_context+0x419/0x500 [ 86.972894][ T4324] fs_context_for_mount+0x1d/0x20 [ 86.977955][ T4324] path_mount+0xe0d/0x1d20 [ 86.982359][ T4324] __se_sys_mount+0x24b/0x2f0 [ 86.987100][ T4324] ? fput+0x2d/0x130 [ 86.990977][ T4324] __x64_sys_mount+0x63/0x70 [ 86.995648][ T4324] do_syscall_64+0x44/0xa0 [ 87.000244][ T4324] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 87.006162][ T4324] RIP: 0033:0x7fa0e83dda39 [ 87.010644][ T4324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 87.030346][ T4324] RSP: 002b:00007fa0e6154188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 87.038806][ T4324] RAX: ffffffffffffffda RBX: 00007fa0e84e0f60 RCX: 00007fa0e83dda39 [ 87.046769][ T4324] RDX: 0000000020000080 RSI: 0000000020000300 RDI: 0000000000000000 [ 87.054754][ T4324] RBP: 00007fa0e61541d0 R08: 0000000020001e80 R09: 0000000000000000 [ 87.062726][ T4324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.070688][ T4324] R13: 00007fff114821bf R14: 00007fa0e6154300 R15: 0000000000022000 [ 87.107460][ T4332] loop4: detected capacity change from 0 to 264192 [ 87.134323][ T4332] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 23:59:39 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), 0x0, 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) 23:59:39 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x501c5400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) r1 = gettid() wait4(r1, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) tkill(r0, 0x2a) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={0x0, 0x8, 0x1, [0x7f, 0x628f, 0x10001, 0x1, 0x2], [0x4, 0x81, 0x7, 0xfffffffffffffffe, 0x1, 0x4fc6, 0x7, 0x7ff, 0x1, 0x7, 0x7, 0x5, 0x6d5d202d, 0x9, 0x80000001, 0x4, 0x8, 0x5, 0x10100000, 0xfa, 0x20, 0x4, 0x81, 0x69ab, 0x401, 0x3, 0x7, 0x43, 0xffffffff, 0xb14, 0x8, 0x1000000000, 0x4, 0x3, 0x3ff, 0x8, 0x5, 0x4, 0x8, 0xe2, 0x1000, 0x9, 0x4, 0x9, 0x5, 0x8, 0x6, 0x6, 0xe3, 0x6, 0x163451fd, 0xe0, 0x2, 0x2, 0xfffffffffffffff8, 0x8, 0x10000, 0x4, 0x3, 0x2, 0x2, 0x40, 0x8, 0xfffffffffffff8f1, 0x5, 0xeda, 0x10000, 0x4, 0x10001, 0x9, 0x2, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0x5, 0x80, 0x8e2, 0x80000000, 0x1, 0x5, 0x6, 0x7, 0x7, 0x6, 0x4, 0x9, 0x2, 0xb37, 0x159, 0x1000, 0x1, 0x10000, 0x800, 0xb56, 0x7ff, 0xdb, 0x0, 0x10000, 0xfffffffffffffffb, 0x8, 0x1000, 0x8, 0x7, 0x4, 0x3, 0x5, 0x2, 0x7fffffff, 0x8, 0x4, 0x2, 0x7, 0x5, 0xffffffff, 0x7, 0x7, 0x100000001, 0x1000000009, 0x3, 0x7]}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:39 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) tkill(0x0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:39 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:39 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 9) 23:59:39 executing program 4: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r2, r1, 0x0, 0xffffff04) [ 87.169801][ T529] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 87.224713][ T4341] FAULT_INJECTION: forcing a failure. [ 87.224713][ T4341] name failslab, interval 1, probability 0, space 0, times 0 [ 87.237338][ T4341] CPU: 0 PID: 4341 Comm: syz-executor.0 Not tainted 5.15.0-rc6-syzkaller #0 [ 87.246118][ T4341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 87.256169][ T4341] Call Trace: [ 87.259438][ T4341] dump_stack_lvl+0xd6/0x122 [ 87.264022][ T4341] dump_stack+0x11/0x1b [ 87.268186][ T4341] should_fail+0x23c/0x250 [ 87.272617][ T4341] __should_failslab+0x81/0x90 [ 87.277435][ T4341] ? v9fs_mount+0x41/0x4c0 [ 87.281862][ T4341] should_failslab+0x5/0x20 [ 87.284767][ T4336] loop4: detected capacity change from 0 to 264192 [ 87.286432][ T4341] kmem_cache_alloc_trace+0x52/0x320 [ 87.286456][ T4341] ? tsan.module_ctor+0x10/0x10 [ 87.303027][ T4341] v9fs_mount+0x41/0x4c0 [ 87.307344][ T4341] ? selinux_capable+0x34/0x40 [ 87.312142][ T4341] ? tsan.module_ctor+0x10/0x10 [ 87.317087][ T4341] legacy_get_tree+0x70/0xc0 [ 87.321668][ T4341] vfs_get_tree+0x4a/0x1a0 [ 87.326107][ T4341] path_mount+0x11ec/0x1d20 [ 87.330670][ T4341] __se_sys_mount+0x24b/0x2f0 [ 87.335343][ T4341] ? fput+0x2d/0x130 [ 87.339271][ T4341] __x64_sys_mount+0x63/0x70 [ 87.343930][ T4341] do_syscall_64+0x44/0xa0 [ 87.348419][ T4341] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 87.354306][ T4341] RIP: 0033:0x7fa0e83dda39 [ 87.358722][ T4341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 87.378375][ T4341] RSP: 002b:00007fa0e6154188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 87.386767][ T4341] RAX: ffffffffffffffda RBX: 00007fa0e84e0f60 RCX: 00007fa0e83dda39 [ 87.394715][ T4341] RDX: 0000000020000080 RSI: 0000000020000300 RDI: 0000000000000000 [ 87.402669][ T4341] RBP: 00007fa0e61541d0 R08: 0000000020001e80 R09: 0000000000000000 [ 87.410619][ T4341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 23:59:39 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x501c5400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) r1 = gettid() wait4(r1, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) tkill(r0, 0x2a) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={0x0, 0x8, 0x1, [0x7f, 0x628f, 0x10001, 0x1, 0x2], [0x4, 0x81, 0x7, 0xfffffffffffffffe, 0x1, 0x4fc6, 0x7, 0x7ff, 0x1, 0x7, 0x7, 0x5, 0x6d5d202d, 0x9, 0x80000001, 0x4, 0x8, 0x5, 0x10100000, 0xfa, 0x20, 0x4, 0x81, 0x69ab, 0x401, 0x3, 0x7, 0x43, 0xffffffff, 0xb14, 0x8, 0x1000000000, 0x4, 0x3, 0x3ff, 0x8, 0x5, 0x4, 0x8, 0xe2, 0x1000, 0x9, 0x4, 0x9, 0x5, 0x8, 0x6, 0x6, 0xe3, 0x6, 0x163451fd, 0xe0, 0x2, 0x2, 0xfffffffffffffff8, 0x8, 0x10000, 0x4, 0x3, 0x2, 0x2, 0x40, 0x8, 0xfffffffffffff8f1, 0x5, 0xeda, 0x10000, 0x4, 0x10001, 0x9, 0x2, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0x5, 0x80, 0x8e2, 0x80000000, 0x1, 0x5, 0x6, 0x7, 0x7, 0x6, 0x4, 0x9, 0x2, 0xb37, 0x159, 0x1000, 0x1, 0x10000, 0x800, 0xb56, 0x7ff, 0xdb, 0x0, 0x10000, 0xfffffffffffffffb, 0x8, 0x1000, 0x8, 0x7, 0x4, 0x3, 0x5, 0x2, 0x7fffffff, 0x8, 0x4, 0x2, 0x7, 0x5, 0xffffffff, 0x7, 0x7, 0x100000001, 0x1000000009, 0x3, 0x7]}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:39 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) r1 = gettid() wait4(r1, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) tkill(r0, 0x2a) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={0x0, 0x8, 0x1, [0x7f, 0x628f, 0x10001, 0x1, 0x2], [0x4, 0x81, 0x7, 0xfffffffffffffffe, 0x1, 0x4fc6, 0x7, 0x7ff, 0x1, 0x7, 0x7, 0x5, 0x6d5d202d, 0x9, 0x80000001, 0x4, 0x8, 0x5, 0x10100000, 0xfa, 0x20, 0x4, 0x81, 0x69ab, 0x401, 0x3, 0x7, 0x43, 0xffffffff, 0xb14, 0x8, 0x1000000000, 0x4, 0x3, 0x3ff, 0x8, 0x5, 0x4, 0x8, 0xe2, 0x1000, 0x9, 0x4, 0x9, 0x5, 0x8, 0x6, 0x6, 0xe3, 0x6, 0x163451fd, 0xe0, 0x2, 0x2, 0xfffffffffffffff8, 0x8, 0x10000, 0x4, 0x3, 0x2, 0x2, 0x40, 0x8, 0xfffffffffffff8f1, 0x5, 0xeda, 0x10000, 0x4, 0x10001, 0x9, 0x2, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0x5, 0x80, 0x8e2, 0x80000000, 0x1, 0x5, 0x6, 0x7, 0x7, 0x6, 0x4, 0x9, 0x2, 0xb37, 0x159, 0x1000, 0x1, 0x10000, 0x800, 0xb56, 0x7ff, 0xdb, 0x0, 0x10000, 0xfffffffffffffffb, 0x8, 0x1000, 0x8, 0x7, 0x4, 0x3, 0x5, 0x2, 0x7fffffff, 0x8, 0x4, 0x2, 0x7, 0x5, 0xffffffff, 0x7, 0x7, 0x100000001, 0x1000000009, 0x3, 0x7]}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:39 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) tkill(0x0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 87.418708][ T4341] R13: 00007fff114821bf R14: 00007fa0e6154300 R15: 0000000000022000 23:59:39 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 87.462829][ T4352] loop2: detected capacity change from 0 to 264192 23:59:39 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) tkill(r0, 0x17) r1 = gettid() wait4(r1, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) tkill(r0, 0x2a) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={0x0, 0x8, 0x1, [0x7f, 0x628f, 0x10001, 0x1, 0x2], [0x4, 0x81, 0x7, 0xfffffffffffffffe, 0x1, 0x4fc6, 0x7, 0x7ff, 0x1, 0x7, 0x7, 0x5, 0x6d5d202d, 0x9, 0x80000001, 0x4, 0x8, 0x5, 0x10100000, 0xfa, 0x20, 0x4, 0x81, 0x69ab, 0x401, 0x3, 0x7, 0x43, 0xffffffff, 0xb14, 0x8, 0x1000000000, 0x4, 0x3, 0x3ff, 0x8, 0x5, 0x4, 0x8, 0xe2, 0x1000, 0x9, 0x4, 0x9, 0x5, 0x8, 0x6, 0x6, 0xe3, 0x6, 0x163451fd, 0xe0, 0x2, 0x2, 0xfffffffffffffff8, 0x8, 0x10000, 0x4, 0x3, 0x2, 0x2, 0x40, 0x8, 0xfffffffffffff8f1, 0x5, 0xeda, 0x10000, 0x4, 0x10001, 0x9, 0x2, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0x5, 0x80, 0x8e2, 0x80000000, 0x1, 0x5, 0x6, 0x7, 0x7, 0x6, 0x4, 0x9, 0x2, 0xb37, 0x159, 0x1000, 0x1, 0x10000, 0x800, 0xb56, 0x7ff, 0xdb, 0x0, 0x10000, 0xfffffffffffffffb, 0x8, 0x1000, 0x8, 0x7, 0x4, 0x3, 0x5, 0x2, 0x7fffffff, 0x8, 0x4, 0x2, 0x7, 0x5, 0xffffffff, 0x7, 0x7, 0x100000001, 0x1000000009, 0x3, 0x7]}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 87.549495][ T4336] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 23:59:39 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) tkill(0x0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:40 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), 0x0, 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) 23:59:40 executing program 4: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) 23:59:40 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 10) 23:59:40 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) tkill(r0, 0x17) r1 = gettid() wait4(r1, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) tkill(r0, 0x2a) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={0x0, 0x8, 0x1, [0x7f, 0x628f, 0x10001, 0x1, 0x2], [0x4, 0x81, 0x7, 0xfffffffffffffffe, 0x1, 0x4fc6, 0x7, 0x7ff, 0x1, 0x7, 0x7, 0x5, 0x6d5d202d, 0x9, 0x80000001, 0x4, 0x8, 0x5, 0x10100000, 0xfa, 0x20, 0x4, 0x81, 0x69ab, 0x401, 0x3, 0x7, 0x43, 0xffffffff, 0xb14, 0x8, 0x1000000000, 0x4, 0x3, 0x3ff, 0x8, 0x5, 0x4, 0x8, 0xe2, 0x1000, 0x9, 0x4, 0x9, 0x5, 0x8, 0x6, 0x6, 0xe3, 0x6, 0x163451fd, 0xe0, 0x2, 0x2, 0xfffffffffffffff8, 0x8, 0x10000, 0x4, 0x3, 0x2, 0x2, 0x40, 0x8, 0xfffffffffffff8f1, 0x5, 0xeda, 0x10000, 0x4, 0x10001, 0x9, 0x2, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0x5, 0x80, 0x8e2, 0x80000000, 0x1, 0x5, 0x6, 0x7, 0x7, 0x6, 0x4, 0x9, 0x2, 0xb37, 0x159, 0x1000, 0x1, 0x10000, 0x800, 0xb56, 0x7ff, 0xdb, 0x0, 0x10000, 0xfffffffffffffffb, 0x8, 0x1000, 0x8, 0x7, 0x4, 0x3, 0x5, 0x2, 0x7fffffff, 0x8, 0x4, 0x2, 0x7, 0x5, 0xffffffff, 0x7, 0x7, 0x100000001, 0x1000000009, 0x3, 0x7]}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:40 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:40 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) tkill(r0, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 88.310513][ T4369] loop4: detected capacity change from 0 to 264192 [ 88.319284][ T4369] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 88.340372][ T4377] FAULT_INJECTION: forcing a failure. [ 88.340372][ T4377] name failslab, interval 1, probability 0, space 0, times 0 [ 88.353000][ T4377] CPU: 0 PID: 4377 Comm: syz-executor.0 Not tainted 5.15.0-rc6-syzkaller #0 [ 88.361673][ T4377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 88.371721][ T4377] Call Trace: [ 88.374990][ T4377] dump_stack_lvl+0xd6/0x122 [ 88.379654][ T4377] dump_stack+0x11/0x1b [ 88.383808][ T4377] should_fail+0x23c/0x250 [ 88.388227][ T4377] ? v9fs_session_init+0x48/0xd50 [ 88.393246][ T4377] __should_failslab+0x81/0x90 [ 88.398006][ T4377] should_failslab+0x5/0x20 [ 88.402499][ T4377] __kmalloc_track_caller+0x6d/0x350 [ 88.407775][ T4377] ? make_kuid+0x117/0x170 [ 88.412193][ T4377] kstrdup+0x31/0x70 [ 88.416082][ T4377] v9fs_session_init+0x48/0xd50 [ 88.420926][ T4377] ? avc_has_perm_noaudit+0x1c0/0x270 [ 88.426438][ T4377] ? should_fail+0xd6/0x250 [ 88.431040][ T4377] ? kmem_cache_alloc_trace+0x221/0x320 [ 88.436585][ T4377] ? v9fs_mount+0x41/0x4c0 [ 88.441104][ T4377] v9fs_mount+0x57/0x4c0 [ 88.445365][ T4377] ? selinux_capable+0x34/0x40 [ 88.450127][ T4377] ? tsan.module_ctor+0x10/0x10 [ 88.455081][ T4377] legacy_get_tree+0x70/0xc0 23:59:40 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) tkill(r0, 0x17) r1 = gettid() wait4(r1, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) tkill(r0, 0x2a) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={0x0, 0x8, 0x1, [0x7f, 0x628f, 0x10001, 0x1, 0x2], [0x4, 0x81, 0x7, 0xfffffffffffffffe, 0x1, 0x4fc6, 0x7, 0x7ff, 0x1, 0x7, 0x7, 0x5, 0x6d5d202d, 0x9, 0x80000001, 0x4, 0x8, 0x5, 0x10100000, 0xfa, 0x20, 0x4, 0x81, 0x69ab, 0x401, 0x3, 0x7, 0x43, 0xffffffff, 0xb14, 0x8, 0x1000000000, 0x4, 0x3, 0x3ff, 0x8, 0x5, 0x4, 0x8, 0xe2, 0x1000, 0x9, 0x4, 0x9, 0x5, 0x8, 0x6, 0x6, 0xe3, 0x6, 0x163451fd, 0xe0, 0x2, 0x2, 0xfffffffffffffff8, 0x8, 0x10000, 0x4, 0x3, 0x2, 0x2, 0x40, 0x8, 0xfffffffffffff8f1, 0x5, 0xeda, 0x10000, 0x4, 0x10001, 0x9, 0x2, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0x5, 0x80, 0x8e2, 0x80000000, 0x1, 0x5, 0x6, 0x7, 0x7, 0x6, 0x4, 0x9, 0x2, 0xb37, 0x159, 0x1000, 0x1, 0x10000, 0x800, 0xb56, 0x7ff, 0xdb, 0x0, 0x10000, 0xfffffffffffffffb, 0x8, 0x1000, 0x8, 0x7, 0x4, 0x3, 0x5, 0x2, 0x7fffffff, 0x8, 0x4, 0x2, 0x7, 0x5, 0xffffffff, 0x7, 0x7, 0x100000001, 0x1000000009, 0x3, 0x7]}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:40 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:40 executing program 4: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) 23:59:40 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) tkill(r0, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 88.459704][ T4377] vfs_get_tree+0x4a/0x1a0 [ 88.464265][ T4377] path_mount+0x11ec/0x1d20 [ 88.468845][ T4377] __se_sys_mount+0x24b/0x2f0 [ 88.473519][ T4377] ? fput+0x2d/0x130 [ 88.477423][ T4377] __x64_sys_mount+0x63/0x70 [ 88.482026][ T4377] do_syscall_64+0x44/0xa0 [ 88.486454][ T4377] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 88.486808][ T4386] loop2: detected capacity change from 0 to 264192 [ 88.492369][ T4377] RIP: 0033:0x7fa0e83dda39 [ 88.492386][ T4377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 88.522851][ T4377] RSP: 002b:00007fa0e6154188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 88.531316][ T4377] RAX: ffffffffffffffda RBX: 00007fa0e84e0f60 RCX: 00007fa0e83dda39 [ 88.539269][ T4377] RDX: 0000000020000080 RSI: 0000000020000300 RDI: 0000000000000000 [ 88.547220][ T4377] RBP: 00007fa0e61541d0 R08: 0000000020001e80 R09: 0000000000000000 [ 88.555173][ T4377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 88.563197][ T4377] R13: 00007fff114821bf R14: 00007fa0e6154300 R15: 0000000000022000 [ 88.573777][ T199] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 23:59:40 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:41 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 11) [ 88.659308][ T4400] loop4: detected capacity change from 0 to 264192 [ 88.674621][ T4400] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 88.725704][ T4403] FAULT_INJECTION: forcing a failure. [ 88.725704][ T4403] name failslab, interval 1, probability 0, space 0, times 0 [ 88.738401][ T4403] CPU: 0 PID: 4403 Comm: syz-executor.0 Not tainted 5.15.0-rc6-syzkaller #0 [ 88.747116][ T4403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 88.757170][ T4403] Call Trace: [ 88.760447][ T4403] dump_stack_lvl+0xd6/0x122 [ 88.765041][ T4403] dump_stack+0x11/0x1b [ 88.769304][ T4403] should_fail+0x23c/0x250 [ 88.773766][ T4403] ? v9fs_session_init+0x77/0xd50 [ 88.778844][ T4403] __should_failslab+0x81/0x90 [ 88.783618][ T4403] should_failslab+0x5/0x20 [ 88.788124][ T4403] __kmalloc_track_caller+0x6d/0x350 [ 88.793468][ T4403] ? v9fs_session_init+0x48/0xd50 [ 88.798471][ T4403] kstrdup+0x31/0x70 [ 88.802370][ T4403] v9fs_session_init+0x77/0xd50 [ 88.807207][ T4403] ? avc_has_perm_noaudit+0x1c0/0x270 [ 88.812832][ T4403] ? should_fail+0xd6/0x250 [ 88.817320][ T4403] ? kmem_cache_alloc_trace+0x221/0x320 [ 88.822936][ T4403] ? v9fs_mount+0x41/0x4c0 [ 88.827380][ T4403] v9fs_mount+0x57/0x4c0 [ 88.831664][ T4403] ? selinux_capable+0x34/0x40 [ 88.836427][ T4403] ? tsan.module_ctor+0x10/0x10 [ 88.841315][ T4403] legacy_get_tree+0x70/0xc0 [ 88.845930][ T4403] vfs_get_tree+0x4a/0x1a0 [ 88.850340][ T4403] path_mount+0x11ec/0x1d20 [ 88.854889][ T4403] __se_sys_mount+0x24b/0x2f0 [ 88.859557][ T4403] ? fput+0x2d/0x130 [ 88.863434][ T4403] __x64_sys_mount+0x63/0x70 [ 88.868064][ T4403] do_syscall_64+0x44/0xa0 [ 88.872487][ T4403] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 88.878433][ T4403] RIP: 0033:0x7fa0e83dda39 [ 88.882840][ T4403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 88.902461][ T4403] RSP: 002b:00007fa0e6154188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 88.910867][ T4403] RAX: ffffffffffffffda RBX: 00007fa0e84e0f60 RCX: 00007fa0e83dda39 [ 88.918845][ T4403] RDX: 0000000020000080 RSI: 0000000020000300 RDI: 0000000000000000 [ 88.926801][ T4403] RBP: 00007fa0e61541d0 R08: 0000000020001e80 R09: 0000000000000000 [ 88.934763][ T4403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 88.942721][ T4403] R13: 00007fff114821bf R14: 00007fa0e6154300 R15: 0000000000022000 [ 88.950830][ T199] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 23:59:41 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x17) r1 = gettid() wait4(r1, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) tkill(r0, 0x2a) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={0x0, 0x8, 0x1, [0x7f, 0x628f, 0x10001, 0x1, 0x2], [0x4, 0x81, 0x7, 0xfffffffffffffffe, 0x1, 0x4fc6, 0x7, 0x7ff, 0x1, 0x7, 0x7, 0x5, 0x6d5d202d, 0x9, 0x80000001, 0x4, 0x8, 0x5, 0x10100000, 0xfa, 0x20, 0x4, 0x81, 0x69ab, 0x401, 0x3, 0x7, 0x43, 0xffffffff, 0xb14, 0x8, 0x1000000000, 0x4, 0x3, 0x3ff, 0x8, 0x5, 0x4, 0x8, 0xe2, 0x1000, 0x9, 0x4, 0x9, 0x5, 0x8, 0x6, 0x6, 0xe3, 0x6, 0x163451fd, 0xe0, 0x2, 0x2, 0xfffffffffffffff8, 0x8, 0x10000, 0x4, 0x3, 0x2, 0x2, 0x40, 0x8, 0xfffffffffffff8f1, 0x5, 0xeda, 0x10000, 0x4, 0x10001, 0x9, 0x2, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0x5, 0x80, 0x8e2, 0x80000000, 0x1, 0x5, 0x6, 0x7, 0x7, 0x6, 0x4, 0x9, 0x2, 0xb37, 0x159, 0x1000, 0x1, 0x10000, 0x800, 0xb56, 0x7ff, 0xdb, 0x0, 0x10000, 0xfffffffffffffffb, 0x8, 0x1000, 0x8, 0x7, 0x4, 0x3, 0x5, 0x2, 0x7fffffff, 0x8, 0x4, 0x2, 0x7, 0x5, 0xffffffff, 0x7, 0x7, 0x100000001, 0x1000000009, 0x3, 0x7]}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:41 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) tkill(r0, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, 0x0, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:41 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000300000000000000ff0000000000000006000000000000002600000000000000001000000000000009000030769b0f18de2428f13636e10800000000ff7f000000000000ec69000000000000000000000000000000080000eecba6a2b866b12e9cf4b522d24e7e51ddfc1b1a94a50d94e2389da31f46bc35aeeafea64a2e8f584e02bf1d22de592d9de36f195c45"]}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:41 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), 0x0, 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba868012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) 23:59:41 executing program 4: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) 23:59:41 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 12) 23:59:41 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid=0x3bef}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 89.346788][ T4410] loop4: detected capacity change from 0 to 264192 [ 89.355900][ T4413] FAULT_INJECTION: forcing a failure. [ 89.355900][ T4413] name failslab, interval 1, probability 0, space 0, times 0 [ 89.368509][ T4413] CPU: 0 PID: 4413 Comm: syz-executor.0 Not tainted 5.15.0-rc6-syzkaller #0 [ 89.377215][ T4413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 89.387258][ T4413] Call Trace: [ 89.390527][ T4413] dump_stack_lvl+0xd6/0x122 23:59:41 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 89.395212][ T4413] dump_stack+0x11/0x1b [ 89.399366][ T4413] should_fail+0x23c/0x250 [ 89.403854][ T4413] __should_failslab+0x81/0x90 [ 89.408686][ T4413] ? p9_client_create+0x53/0x720 [ 89.413622][ T4413] should_failslab+0x5/0x20 [ 89.418122][ T4413] kmem_cache_alloc_trace+0x52/0x320 [ 89.423462][ T4413] ? selinux_inode_permission+0x335/0x3f0 [ 89.429256][ T4413] p9_client_create+0x53/0x720 [ 89.434104][ T4413] ? __kmalloc_track_caller+0x247/0x350 [ 89.439642][ T4413] ? v9fs_session_init+0x77/0xd50 23:59:41 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 89.444749][ T4413] v9fs_session_init+0x100/0xd50 [ 89.449676][ T4413] ? avc_has_perm_noaudit+0x1c0/0x270 [ 89.455082][ T4413] ? should_fail+0xd6/0x250 [ 89.459599][ T4413] ? kmem_cache_alloc_trace+0x221/0x320 [ 89.465206][ T4413] ? v9fs_mount+0x41/0x4c0 [ 89.469689][ T4413] v9fs_mount+0x57/0x4c0 [ 89.474020][ T4413] ? selinux_capable+0x34/0x40 [ 89.478859][ T4413] ? tsan.module_ctor+0x10/0x10 [ 89.483765][ T4413] legacy_get_tree+0x70/0xc0 [ 89.484335][ T4424] loop2: detected capacity change from 0 to 264192 [ 89.488357][ T4413] vfs_get_tree+0x4a/0x1a0 [ 89.488379][ T4413] path_mount+0x11ec/0x1d20 [ 89.503736][ T4413] __se_sys_mount+0x24b/0x2f0 [ 89.508411][ T4413] ? fput+0x2d/0x130 [ 89.512326][ T4413] __x64_sys_mount+0x63/0x70 [ 89.516935][ T4413] do_syscall_64+0x44/0xa0 [ 89.521351][ T4413] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 89.527262][ T4413] RIP: 0033:0x7fa0e83dda39 23:59:41 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:41 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 89.531676][ T4413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 89.551429][ T4413] RSP: 002b:00007fa0e6154188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 89.559867][ T4413] RAX: ffffffffffffffda RBX: 00007fa0e84e0f60 RCX: 00007fa0e83dda39 [ 89.567835][ T4413] RDX: 0000000020000080 RSI: 0000000020000300 RDI: 0000000000000000 [ 89.575795][ T4413] RBP: 00007fa0e61541d0 R08: 0000000020001e80 R09: 0000000000000000 [ 89.583832][ T4413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 23:59:41 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) wait4(0x0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 89.591796][ T4413] R13: 00007fff114821bf R14: 00007fa0e6154300 R15: 0000000000022000 [ 89.600066][ T4410] FAT-fs (loop4): Unrecognized mount option "./file0" or missing value 23:59:42 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x17) r1 = gettid() wait4(r1, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) tkill(r0, 0x2a) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={0x0, 0x8, 0x1, [0x7f, 0x628f, 0x10001, 0x1, 0x2], [0x4, 0x81, 0x7, 0xfffffffffffffffe, 0x1, 0x4fc6, 0x7, 0x7ff, 0x1, 0x7, 0x7, 0x5, 0x6d5d202d, 0x9, 0x80000001, 0x4, 0x8, 0x5, 0x10100000, 0xfa, 0x20, 0x4, 0x81, 0x69ab, 0x401, 0x3, 0x7, 0x43, 0xffffffff, 0xb14, 0x8, 0x1000000000, 0x4, 0x3, 0x3ff, 0x8, 0x5, 0x4, 0x8, 0xe2, 0x1000, 0x9, 0x4, 0x9, 0x5, 0x8, 0x6, 0x6, 0xe3, 0x6, 0x163451fd, 0xe0, 0x2, 0x2, 0xfffffffffffffff8, 0x8, 0x10000, 0x4, 0x3, 0x2, 0x2, 0x40, 0x8, 0xfffffffffffff8f1, 0x5, 0xeda, 0x10000, 0x4, 0x10001, 0x9, 0x2, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0x5, 0x80, 0x8e2, 0x80000000, 0x1, 0x5, 0x6, 0x7, 0x7, 0x6, 0x4, 0x9, 0x2, 0xb37, 0x159, 0x1000, 0x1, 0x10000, 0x800, 0xb56, 0x7ff, 0xdb, 0x0, 0x10000, 0xfffffffffffffffb, 0x8, 0x1000, 0x8, 0x7, 0x4, 0x3, 0x5, 0x2, 0x7fffffff, 0x8, 0x4, 0x2, 0x7, 0x5, 0xffffffff, 0x7, 0x7, 0x100000001, 0x1000000009, 0x3, 0x7]}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:42 executing program 4: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, 0xffffffffffffffff, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r2, r1, 0x0, 0xffffff04) 23:59:42 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 13) [ 89.753178][ T4444] loop4: detected capacity change from 0 to 264192 [ 89.760071][ T4443] FAULT_INJECTION: forcing a failure. [ 89.760071][ T4443] name failslab, interval 1, probability 0, space 0, times 0 [ 89.772735][ T4443] CPU: 0 PID: 4443 Comm: syz-executor.0 Not tainted 5.15.0-rc6-syzkaller #0 [ 89.781470][ T4443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 89.791521][ T4443] Call Trace: [ 89.794794][ T4443] dump_stack_lvl+0xd6/0x122 [ 89.799381][ T4443] dump_stack+0x11/0x1b [ 89.803519][ T4443] should_fail+0x23c/0x250 [ 89.807916][ T4443] ? p9_client_create+0x1b5/0x720 [ 89.812937][ T4443] __should_failslab+0x81/0x90 [ 89.817695][ T4443] should_failslab+0x5/0x20 [ 89.822233][ T4443] __kmalloc_track_caller+0x6d/0x350 [ 89.827548][ T4443] ? kmem_cache_alloc_trace+0x221/0x320 [ 89.833135][ T4443] kstrdup+0x31/0x70 [ 89.837024][ T4443] p9_client_create+0x1b5/0x720 [ 89.841950][ T4443] v9fs_session_init+0x100/0xd50 [ 89.846870][ T4443] ? avc_has_perm_noaudit+0x1c0/0x270 [ 89.852266][ T4443] ? should_fail+0xd6/0x250 [ 89.856758][ T4443] ? kmem_cache_alloc_trace+0x221/0x320 [ 89.862349][ T4443] ? v9fs_mount+0x41/0x4c0 [ 89.866749][ T4443] v9fs_mount+0x57/0x4c0 [ 89.870980][ T4443] ? selinux_capable+0x34/0x40 [ 89.875739][ T4443] ? tsan.module_ctor+0x10/0x10 [ 89.880576][ T4443] legacy_get_tree+0x70/0xc0 [ 89.885177][ T4443] vfs_get_tree+0x4a/0x1a0 [ 89.889609][ T4443] path_mount+0x11ec/0x1d20 [ 89.894116][ T4443] __se_sys_mount+0x24b/0x2f0 [ 89.898827][ T4443] ? fput+0x2d/0x130 [ 89.902712][ T4443] __x64_sys_mount+0x63/0x70 [ 89.907368][ T4443] do_syscall_64+0x44/0xa0 [ 89.911774][ T4443] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 89.917659][ T4443] RIP: 0033:0x7fa0e83dda39 [ 89.922055][ T4443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 89.942572][ T4443] RSP: 002b:00007fa0e6154188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 89.950968][ T4443] RAX: ffffffffffffffda RBX: 00007fa0e84e0f60 RCX: 00007fa0e83dda39 [ 89.958922][ T4443] RDX: 0000000020000080 RSI: 0000000020000300 RDI: 0000000000000000 [ 89.966878][ T4443] RBP: 00007fa0e61541d0 R08: 0000000020001e80 R09: 0000000000000000 [ 89.974852][ T4443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 89.982803][ T4443] R13: 00007fff114821bf R14: 00007fa0e6154300 R15: 0000000000022000 [ 90.022383][ T4444] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 23:59:42 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba868012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) 23:59:42 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:42 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) wait4(0x0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:42 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 14) 23:59:42 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x17) r1 = gettid() wait4(r1, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) tkill(r0, 0x2a) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={0x0, 0x8, 0x1, [0x7f, 0x628f, 0x10001, 0x1, 0x2], [0x4, 0x81, 0x7, 0xfffffffffffffffe, 0x1, 0x4fc6, 0x7, 0x7ff, 0x1, 0x7, 0x7, 0x5, 0x6d5d202d, 0x9, 0x80000001, 0x4, 0x8, 0x5, 0x10100000, 0xfa, 0x20, 0x4, 0x81, 0x69ab, 0x401, 0x3, 0x7, 0x43, 0xffffffff, 0xb14, 0x8, 0x1000000000, 0x4, 0x3, 0x3ff, 0x8, 0x5, 0x4, 0x8, 0xe2, 0x1000, 0x9, 0x4, 0x9, 0x5, 0x8, 0x6, 0x6, 0xe3, 0x6, 0x163451fd, 0xe0, 0x2, 0x2, 0xfffffffffffffff8, 0x8, 0x10000, 0x4, 0x3, 0x2, 0x2, 0x40, 0x8, 0xfffffffffffff8f1, 0x5, 0xeda, 0x10000, 0x4, 0x10001, 0x9, 0x2, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0x5, 0x80, 0x8e2, 0x80000000, 0x1, 0x5, 0x6, 0x7, 0x7, 0x6, 0x4, 0x9, 0x2, 0xb37, 0x159, 0x1000, 0x1, 0x10000, 0x800, 0xb56, 0x7ff, 0xdb, 0x0, 0x10000, 0xfffffffffffffffb, 0x8, 0x1000, 0x8, 0x7, 0x4, 0x3, 0x5, 0x2, 0x7fffffff, 0x8, 0x4, 0x2, 0x7, 0x5, 0xffffffff, 0x7, 0x7, 0x100000001, 0x1000000009, 0x3, 0x7]}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:42 executing program 4: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, 0xffffffffffffffff, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r2, r1, 0x0, 0xffffff04) [ 90.348751][ T4454] loop4: detected capacity change from 0 to 264192 [ 90.363465][ T4458] FAULT_INJECTION: forcing a failure. [ 90.363465][ T4458] name failslab, interval 1, probability 0, space 0, times 0 [ 90.375008][ T4457] FAT-fs (loop2): bogus number of reserved sectors [ 90.376136][ T4458] CPU: 0 PID: 4458 Comm: syz-executor.0 Not tainted 5.15.0-rc6-syzkaller #0 [ 90.382643][ T4457] FAT-fs (loop2): Can't find a valid FAT filesystem [ 90.392506][ T4458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 90.392517][ T4458] Call Trace: [ 90.392524][ T4458] dump_stack_lvl+0xd6/0x122 [ 90.392548][ T4458] dump_stack+0x11/0x1b [ 90.421093][ T4458] should_fail+0x23c/0x250 [ 90.425633][ T4458] ? match_strdup+0x33/0x40 [ 90.430131][ T4458] __should_failslab+0x81/0x90 [ 90.434889][ T4458] should_failslab+0x5/0x20 [ 90.439463][ T4458] __kmalloc_track_caller+0x6d/0x350 [ 90.444747][ T4458] ? strcmp+0x23/0x50 [ 90.448802][ T4458] kmemdup_nul+0x27/0x70 [ 90.453052][ T4458] match_strdup+0x33/0x40 [ 90.457385][ T4458] p9_client_create+0x383/0x720 [ 90.462292][ T4458] v9fs_session_init+0x100/0xd50 [ 90.467250][ T4458] ? avc_has_perm_noaudit+0x1c0/0x270 [ 90.472683][ T4458] ? should_fail+0xd6/0x250 [ 90.477172][ T4458] ? kmem_cache_alloc_trace+0x221/0x320 [ 90.482752][ T4458] ? v9fs_mount+0x41/0x4c0 [ 90.487202][ T4458] v9fs_mount+0x57/0x4c0 [ 90.491427][ T4458] ? selinux_capable+0x34/0x40 [ 90.496173][ T4458] ? tsan.module_ctor+0x10/0x10 [ 90.501010][ T4458] legacy_get_tree+0x70/0xc0 [ 90.505664][ T4458] vfs_get_tree+0x4a/0x1a0 [ 90.510065][ T4458] path_mount+0x11ec/0x1d20 [ 90.514622][ T4458] __se_sys_mount+0x24b/0x2f0 [ 90.519317][ T4458] ? fput+0x2d/0x130 [ 90.523278][ T4458] __x64_sys_mount+0x63/0x70 [ 90.527913][ T4458] do_syscall_64+0x44/0xa0 [ 90.532319][ T4458] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 90.538259][ T4458] RIP: 0033:0x7fa0e83dda39 [ 90.542654][ T4458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 90.562323][ T4458] RSP: 002b:00007fa0e6154188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 90.570721][ T4458] RAX: ffffffffffffffda RBX: 00007fa0e84e0f60 RCX: 00007fa0e83dda39 [ 90.578673][ T4458] RDX: 0000000020000080 RSI: 0000000020000300 RDI: 0000000000000000 [ 90.586696][ T4458] RBP: 00007fa0e61541d0 R08: 0000000020001e80 R09: 0000000000000000 23:59:42 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 15) 23:59:42 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) wait4(0x0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:42 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 90.594659][ T4458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 90.602618][ T4458] R13: 00007fff114821bf R14: 00007fa0e6154300 R15: 0000000000022000 [ 90.629813][ T4454] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 90.680941][ T4474] FAULT_INJECTION: forcing a failure. [ 90.680941][ T4474] name failslab, interval 1, probability 0, space 0, times 0 [ 90.693564][ T4474] CPU: 1 PID: 4474 Comm: syz-executor.0 Not tainted 5.15.0-rc6-syzkaller #0 [ 90.702245][ T4474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 90.707375][ T4478] FAT-fs (loop2): bogus number of reserved sectors [ 90.712423][ T4474] Call Trace: [ 90.712433][ T4474] dump_stack_lvl+0xd6/0x122 23:59:42 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) 23:59:43 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:43 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x17) r1 = gettid() wait4(r1, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) tkill(r0, 0x2a) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={0x0, 0x8, 0x1, [0x7f, 0x628f, 0x10001, 0x1, 0x2], [0x4, 0x81, 0x7, 0xfffffffffffffffe, 0x1, 0x4fc6, 0x7, 0x7ff, 0x1, 0x7, 0x7, 0x5, 0x6d5d202d, 0x9, 0x80000001, 0x4, 0x8, 0x5, 0x10100000, 0xfa, 0x20, 0x4, 0x81, 0x69ab, 0x401, 0x3, 0x7, 0x43, 0xffffffff, 0xb14, 0x8, 0x1000000000, 0x4, 0x3, 0x3ff, 0x8, 0x5, 0x4, 0x8, 0xe2, 0x1000, 0x9, 0x4, 0x9, 0x5, 0x8, 0x6, 0x6, 0xe3, 0x6, 0x163451fd, 0xe0, 0x2, 0x2, 0xfffffffffffffff8, 0x8, 0x10000, 0x4, 0x3, 0x2, 0x2, 0x40, 0x8, 0xfffffffffffff8f1, 0x5, 0xeda, 0x10000, 0x4, 0x10001, 0x9, 0x2, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0x5, 0x80, 0x8e2, 0x80000000, 0x1, 0x5, 0x6, 0x7, 0x7, 0x6, 0x4, 0x9, 0x2, 0xb37, 0x159, 0x1000, 0x1, 0x10000, 0x800, 0xb56, 0x7ff, 0xdb, 0x0, 0x10000, 0xfffffffffffffffb, 0x8, 0x1000, 0x8, 0x7, 0x4, 0x3, 0x5, 0x2, 0x7fffffff, 0x8, 0x4, 0x2, 0x7, 0x5, 0xffffffff, 0x7, 0x7, 0x100000001, 0x1000000009, 0x3, 0x7]}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:43 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) wait4(r0, 0x0, 0x2, &(0x7f0000000140)) [ 90.718954][ T4478] FAT-fs (loop2): Can't find a valid FAT filesystem [ 90.733412][ T4474] dump_stack+0x11/0x1b [ 90.737573][ T4474] should_fail+0x23c/0x250 [ 90.741987][ T4474] ? parse_opts+0xcf/0x2f0 [ 90.746399][ T4474] __should_failslab+0x81/0x90 [ 90.751160][ T4474] should_failslab+0x5/0x20 [ 90.755672][ T4474] __kmalloc_track_caller+0x6d/0x350 [ 90.760951][ T4474] kstrdup+0x31/0x70 [ 90.764843][ T4474] parse_opts+0xcf/0x2f0 [ 90.769155][ T4474] p9_fd_create+0x42/0x1f0 [ 90.773573][ T4474] p9_client_create+0x59a/0x720 23:59:43 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 90.778476][ T4474] v9fs_session_init+0x100/0xd50 [ 90.783404][ T4474] ? avc_has_perm_noaudit+0x1c0/0x270 [ 90.788769][ T4474] ? should_fail+0xd6/0x250 [ 90.793267][ T4474] ? kmem_cache_alloc_trace+0x221/0x320 [ 90.798818][ T4474] ? v9fs_mount+0x41/0x4c0 [ 90.803234][ T4474] v9fs_mount+0x57/0x4c0 [ 90.807506][ T4474] ? selinux_capable+0x34/0x40 [ 90.812271][ T4474] ? tsan.module_ctor+0x10/0x10 [ 90.817119][ T4474] legacy_get_tree+0x70/0xc0 [ 90.821712][ T4474] vfs_get_tree+0x4a/0x1a0 [ 90.826126][ T4474] path_mount+0x11ec/0x1d20 23:59:43 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 90.830787][ T4474] __se_sys_mount+0x24b/0x2f0 [ 90.835476][ T4474] ? fput+0x2d/0x130 [ 90.839369][ T4474] __x64_sys_mount+0x63/0x70 [ 90.844078][ T4474] do_syscall_64+0x44/0xa0 [ 90.848505][ T4474] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 90.854475][ T4474] RIP: 0033:0x7fa0e83dda39 [ 90.858881][ T4474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 90.878486][ T4474] RSP: 002b:00007fa0e6154188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 90.886894][ T4474] RAX: ffffffffffffffda RBX: 00007fa0e84e0f60 RCX: 00007fa0e83dda39 [ 90.894859][ T4474] RDX: 0000000020000080 RSI: 0000000020000300 RDI: 0000000000000000 [ 90.902820][ T4474] RBP: 00007fa0e61541d0 R08: 0000000020001e80 R09: 0000000000000000 [ 90.910884][ T4474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 90.918853][ T4474] R13: 00007fff114821bf R14: 00007fa0e6154300 R15: 0000000000022000 23:59:43 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x17) r1 = gettid() wait4(r1, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) tkill(r0, 0x2a) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={0x0, 0x8, 0x1, [0x7f, 0x628f, 0x10001, 0x1, 0x2], [0x4, 0x81, 0x7, 0xfffffffffffffffe, 0x1, 0x4fc6, 0x7, 0x7ff, 0x1, 0x7, 0x7, 0x5, 0x6d5d202d, 0x9, 0x80000001, 0x4, 0x8, 0x5, 0x10100000, 0xfa, 0x20, 0x4, 0x81, 0x69ab, 0x401, 0x3, 0x7, 0x43, 0xffffffff, 0xb14, 0x8, 0x1000000000, 0x4, 0x3, 0x3ff, 0x8, 0x5, 0x4, 0x8, 0xe2, 0x1000, 0x9, 0x4, 0x9, 0x5, 0x8, 0x6, 0x6, 0xe3, 0x6, 0x163451fd, 0xe0, 0x2, 0x2, 0xfffffffffffffff8, 0x8, 0x10000, 0x4, 0x3, 0x2, 0x2, 0x40, 0x8, 0xfffffffffffff8f1, 0x5, 0xeda, 0x10000, 0x4, 0x10001, 0x9, 0x2, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0x5, 0x80, 0x8e2, 0x80000000, 0x1, 0x5, 0x6, 0x7, 0x7, 0x6, 0x4, 0x9, 0x2, 0xb37, 0x159, 0x1000, 0x1, 0x10000, 0x800, 0xb56, 0x7ff, 0xdb, 0x0, 0x10000, 0xfffffffffffffffb, 0x8, 0x1000, 0x8, 0x7, 0x4, 0x3, 0x5, 0x2, 0x7fffffff, 0x8, 0x4, 0x2, 0x7, 0x5, 0xffffffff, 0x7, 0x7, 0x100000001, 0x1000000009, 0x3, 0x7]}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:43 executing program 4: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, 0xffffffffffffffff, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r2, r1, 0x0, 0xffffff04) [ 90.926941][ T4474] 9pnet: Insufficient options for proto=fd 23:59:43 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba868012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) 23:59:43 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 16) [ 91.038627][ T4506] FAT-fs (loop2): bogus number of reserved sectors [ 91.042751][ T4507] FAULT_INJECTION: forcing a failure. [ 91.042751][ T4507] name failslab, interval 1, probability 0, space 0, times 0 [ 91.045239][ T4506] FAT-fs (loop2): Can't find a valid FAT filesystem [ 91.064482][ T4507] CPU: 0 PID: 4507 Comm: syz-executor.0 Not tainted 5.15.0-rc6-syzkaller #0 [ 91.073148][ T4507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 91.083298][ T4507] Call Trace: [ 91.086561][ T4507] dump_stack_lvl+0xd6/0x122 [ 91.091151][ T4507] dump_stack+0x11/0x1b [ 91.095372][ T4507] should_fail+0x23c/0x250 [ 91.099784][ T4507] ? match_int+0x5b/0x100 [ 91.104132][ T4507] __should_failslab+0x81/0x90 [ 91.108893][ T4507] should_failslab+0x5/0x20 [ 91.113383][ T4507] __kmalloc_track_caller+0x6d/0x350 [ 91.118651][ T4507] kmemdup_nul+0x27/0x70 [ 91.122876][ T4507] match_int+0x5b/0x100 [ 91.127017][ T4507] parse_opts+0x1c0/0x2f0 [ 91.131329][ T4507] p9_fd_create+0x42/0x1f0 [ 91.135740][ T4507] p9_client_create+0x59a/0x720 [ 91.140616][ T4507] v9fs_session_init+0x100/0xd50 [ 91.145539][ T4507] ? avc_has_perm_noaudit+0x1c0/0x270 [ 91.150915][ T4507] ? should_fail+0xd6/0x250 [ 91.155402][ T4507] ? kmem_cache_alloc_trace+0x221/0x320 [ 91.160952][ T4507] ? v9fs_mount+0x41/0x4c0 [ 91.165351][ T4507] v9fs_mount+0x57/0x4c0 [ 91.169614][ T4507] ? selinux_capable+0x34/0x40 [ 91.174362][ T4507] ? tsan.module_ctor+0x10/0x10 [ 91.179225][ T4507] legacy_get_tree+0x70/0xc0 [ 91.183813][ T4507] vfs_get_tree+0x4a/0x1a0 [ 91.188278][ T4507] path_mount+0x11ec/0x1d20 [ 91.192854][ T4507] __se_sys_mount+0x24b/0x2f0 [ 91.197519][ T4507] ? fput+0x2d/0x130 [ 91.201410][ T4507] __x64_sys_mount+0x63/0x70 [ 91.206020][ T4507] do_syscall_64+0x44/0xa0 [ 91.210438][ T4507] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 91.216320][ T4507] RIP: 0033:0x7fa0e83dda39 23:59:43 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) wait4(r0, 0x0, 0x2, &(0x7f0000000140)) [ 91.220718][ T4507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 91.240313][ T4507] RSP: 002b:00007fa0e6154188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 91.248796][ T4507] RAX: ffffffffffffffda RBX: 00007fa0e84e0f60 RCX: 00007fa0e83dda39 [ 91.256759][ T4507] RDX: 0000000020000080 RSI: 0000000020000300 RDI: 0000000000000000 [ 91.264711][ T4507] RBP: 00007fa0e61541d0 R08: 0000000020001e80 R09: 0000000000000000 [ 91.272687][ T4507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 91.280641][ T4507] R13: 00007fff114821bf R14: 00007fa0e6154300 R15: 0000000000022000 23:59:43 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:43 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x17) r1 = gettid() wait4(r1, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) tkill(r0, 0x2a) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={0x0, 0x8, 0x1, [0x7f, 0x628f, 0x10001, 0x1, 0x2], [0x4, 0x81, 0x7, 0xfffffffffffffffe, 0x1, 0x4fc6, 0x7, 0x7ff, 0x1, 0x7, 0x7, 0x5, 0x6d5d202d, 0x9, 0x80000001, 0x4, 0x8, 0x5, 0x10100000, 0xfa, 0x20, 0x4, 0x81, 0x69ab, 0x401, 0x3, 0x7, 0x43, 0xffffffff, 0xb14, 0x8, 0x1000000000, 0x4, 0x3, 0x3ff, 0x8, 0x5, 0x4, 0x8, 0xe2, 0x1000, 0x9, 0x4, 0x9, 0x5, 0x8, 0x6, 0x6, 0xe3, 0x6, 0x163451fd, 0xe0, 0x2, 0x2, 0xfffffffffffffff8, 0x8, 0x10000, 0x4, 0x3, 0x2, 0x2, 0x40, 0x8, 0xfffffffffffff8f1, 0x5, 0xeda, 0x10000, 0x4, 0x10001, 0x9, 0x2, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0x5, 0x80, 0x8e2, 0x80000000, 0x1, 0x5, 0x6, 0x7, 0x7, 0x6, 0x4, 0x9, 0x2, 0xb37, 0x159, 0x1000, 0x1, 0x10000, 0x800, 0xb56, 0x7ff, 0xdb, 0x0, 0x10000, 0xfffffffffffffffb, 0x8, 0x1000, 0x8, 0x7, 0x4, 0x3, 0x5, 0x2, 0x7fffffff, 0x8, 0x4, 0x2, 0x7, 0x5, 0xffffffff, 0x7, 0x7, 0x100000001, 0x1000000009, 0x3, 0x7]}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 91.291053][ T4507] 9pnet: Insufficient options for proto=fd [ 91.304454][ T4505] loop4: detected capacity change from 0 to 264192 23:59:43 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 17) 23:59:43 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 91.360681][ T4505] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 91.429483][ T4523] FAULT_INJECTION: forcing a failure. [ 91.429483][ T4523] name failslab, interval 1, probability 0, space 0, times 0 [ 91.442113][ T4523] CPU: 0 PID: 4523 Comm: syz-executor.0 Not tainted 5.15.0-rc6-syzkaller #0 [ 91.450781][ T4523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 91.460830][ T4523] Call Trace: [ 91.464101][ T4523] dump_stack_lvl+0xd6/0x122 [ 91.468693][ T4523] dump_stack+0x11/0x1b [ 91.472850][ T4523] should_fail+0x23c/0x250 23:59:43 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) wait4(r0, 0x0, 0x0, &(0x7f0000000140)) 23:59:43 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x0) r1 = gettid() wait4(r1, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) tkill(r0, 0x2a) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={0x0, 0x8, 0x1, [0x7f, 0x628f, 0x10001, 0x1, 0x2], [0x4, 0x81, 0x7, 0xfffffffffffffffe, 0x1, 0x4fc6, 0x7, 0x7ff, 0x1, 0x7, 0x7, 0x5, 0x6d5d202d, 0x9, 0x80000001, 0x4, 0x8, 0x5, 0x10100000, 0xfa, 0x20, 0x4, 0x81, 0x69ab, 0x401, 0x3, 0x7, 0x43, 0xffffffff, 0xb14, 0x8, 0x1000000000, 0x4, 0x3, 0x3ff, 0x8, 0x5, 0x4, 0x8, 0xe2, 0x1000, 0x9, 0x4, 0x9, 0x5, 0x8, 0x6, 0x6, 0xe3, 0x6, 0x163451fd, 0xe0, 0x2, 0x2, 0xfffffffffffffff8, 0x8, 0x10000, 0x4, 0x3, 0x2, 0x2, 0x40, 0x8, 0xfffffffffffff8f1, 0x5, 0xeda, 0x10000, 0x4, 0x10001, 0x9, 0x2, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0x5, 0x80, 0x8e2, 0x80000000, 0x1, 0x5, 0x6, 0x7, 0x7, 0x6, 0x4, 0x9, 0x2, 0xb37, 0x159, 0x1000, 0x1, 0x10000, 0x800, 0xb56, 0x7ff, 0xdb, 0x0, 0x10000, 0xfffffffffffffffb, 0x8, 0x1000, 0x8, 0x7, 0x4, 0x3, 0x5, 0x2, 0x7fffffff, 0x8, 0x4, 0x2, 0x7, 0x5, 0xffffffff, 0x7, 0x7, 0x100000001, 0x1000000009, 0x3, 0x7]}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 91.477262][ T4523] ? match_int+0x5b/0x100 [ 91.481611][ T4523] __should_failslab+0x81/0x90 [ 91.486439][ T4523] should_failslab+0x5/0x20 [ 91.490973][ T4523] __kmalloc_track_caller+0x6d/0x350 [ 91.496259][ T4523] kmemdup_nul+0x27/0x70 [ 91.500562][ T4523] match_int+0x5b/0x100 [ 91.504823][ T4523] parse_opts+0x1c0/0x2f0 [ 91.509146][ T4523] p9_fd_create+0x42/0x1f0 [ 91.513619][ T4523] p9_client_create+0x59a/0x720 [ 91.518489][ T4523] v9fs_session_init+0x100/0xd50 [ 91.523424][ T4523] ? avc_has_perm_noaudit+0x1c0/0x270 [ 91.528792][ T4523] ? should_fail+0xd6/0x250 [ 91.533328][ T4523] ? kmem_cache_alloc_trace+0x221/0x320 [ 91.538859][ T4523] ? v9fs_mount+0x41/0x4c0 [ 91.543270][ T4523] v9fs_mount+0x57/0x4c0 [ 91.547545][ T4523] ? selinux_capable+0x34/0x40 [ 91.552365][ T4523] ? tsan.module_ctor+0x10/0x10 [ 91.557203][ T4523] legacy_get_tree+0x70/0xc0 [ 91.561876][ T4523] vfs_get_tree+0x4a/0x1a0 [ 91.566272][ T4523] path_mount+0x11ec/0x1d20 [ 91.570823][ T4523] __se_sys_mount+0x24b/0x2f0 [ 91.575485][ T4523] ? fput+0x2d/0x130 [ 91.579498][ T4523] __x64_sys_mount+0x63/0x70 [ 91.584115][ T4523] do_syscall_64+0x44/0xa0 [ 91.588603][ T4523] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 91.594643][ T4523] RIP: 0033:0x7fa0e83dda39 [ 91.599040][ T4523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 91.618648][ T4523] RSP: 002b:00007fa0e6154188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 91.627150][ T4523] RAX: ffffffffffffffda RBX: 00007fa0e84e0f60 RCX: 00007fa0e83dda39 [ 91.635208][ T4523] RDX: 0000000020000080 RSI: 0000000020000300 RDI: 0000000000000000 [ 91.643247][ T4523] RBP: 00007fa0e61541d0 R08: 0000000020001e80 R09: 0000000000000000 [ 91.651253][ T4523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 91.659214][ T4523] R13: 00007fff114821bf R14: 00007fa0e6154300 R15: 0000000000022000 [ 91.667212][ T4523] 9pnet: Insufficient options for proto=fd 23:59:44 executing program 4: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba868012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(0xffffffffffffffff, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r2, 0xffffffffffffffff, 0x0, 0xffffff04) 23:59:44 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 18) 23:59:44 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x0) r1 = gettid() wait4(r1, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) tkill(r0, 0x2a) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={0x0, 0x8, 0x1, [0x7f, 0x628f, 0x10001, 0x1, 0x2], [0x4, 0x81, 0x7, 0xfffffffffffffffe, 0x1, 0x4fc6, 0x7, 0x7ff, 0x1, 0x7, 0x7, 0x5, 0x6d5d202d, 0x9, 0x80000001, 0x4, 0x8, 0x5, 0x10100000, 0xfa, 0x20, 0x4, 0x81, 0x69ab, 0x401, 0x3, 0x7, 0x43, 0xffffffff, 0xb14, 0x8, 0x1000000000, 0x4, 0x3, 0x3ff, 0x8, 0x5, 0x4, 0x8, 0xe2, 0x1000, 0x9, 0x4, 0x9, 0x5, 0x8, 0x6, 0x6, 0xe3, 0x6, 0x163451fd, 0xe0, 0x2, 0x2, 0xfffffffffffffff8, 0x8, 0x10000, 0x4, 0x3, 0x2, 0x2, 0x40, 0x8, 0xfffffffffffff8f1, 0x5, 0xeda, 0x10000, 0x4, 0x10001, 0x9, 0x2, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0x5, 0x80, 0x8e2, 0x80000000, 0x1, 0x5, 0x6, 0x7, 0x7, 0x6, 0x4, 0x9, 0x2, 0xb37, 0x159, 0x1000, 0x1, 0x10000, 0x800, 0xb56, 0x7ff, 0xdb, 0x0, 0x10000, 0xfffffffffffffffb, 0x8, 0x1000, 0x8, 0x7, 0x4, 0x3, 0x5, 0x2, 0x7fffffff, 0x8, 0x4, 0x2, 0x7, 0x5, 0xffffffff, 0x7, 0x7, 0x100000001, 0x1000000009, 0x3, 0x7]}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 91.755544][ T4541] FAULT_INJECTION: forcing a failure. [ 91.755544][ T4541] name failslab, interval 1, probability 0, space 0, times 0 [ 91.758965][ T4544] loop4: detected capacity change from 0 to 264192 [ 91.768165][ T4541] CPU: 0 PID: 4541 Comm: syz-executor.0 Not tainted 5.15.0-rc6-syzkaller #0 [ 91.768187][ T4541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 91.793400][ T4541] Call Trace: [ 91.796676][ T4541] dump_stack_lvl+0xd6/0x122 [ 91.801266][ T4541] dump_stack+0x11/0x1b [ 91.805440][ T4541] should_fail+0x23c/0x250 [ 91.809847][ T4541] __should_failslab+0x81/0x90 [ 91.814614][ T4541] ? p9_fd_create+0xaf/0x1f0 [ 91.819272][ T4541] should_failslab+0x5/0x20 [ 91.823766][ T4541] kmem_cache_alloc_trace+0x52/0x320 [ 91.829104][ T4541] p9_fd_create+0xaf/0x1f0 [ 91.833516][ T4541] p9_client_create+0x59a/0x720 [ 91.838392][ T4541] v9fs_session_init+0x100/0xd50 [ 91.843323][ T4541] ? avc_has_perm_noaudit+0x1c0/0x270 [ 91.848798][ T4541] ? should_fail+0xd6/0x250 [ 91.853292][ T4541] ? kmem_cache_alloc_trace+0x221/0x320 [ 91.858825][ T4541] ? v9fs_mount+0x41/0x4c0 [ 91.863236][ T4541] v9fs_mount+0x57/0x4c0 [ 91.867478][ T4541] ? selinux_capable+0x34/0x40 [ 91.872231][ T4541] ? tsan.module_ctor+0x10/0x10 [ 91.877123][ T4541] legacy_get_tree+0x70/0xc0 [ 91.881746][ T4541] vfs_get_tree+0x4a/0x1a0 [ 91.886428][ T4541] path_mount+0x11ec/0x1d20 [ 91.890938][ T4541] __se_sys_mount+0x24b/0x2f0 [ 91.895616][ T4541] ? fput+0x2d/0x130 [ 91.899505][ T4541] __x64_sys_mount+0x63/0x70 23:59:44 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba868012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) 23:59:44 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x0) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:44 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x0) r1 = gettid() wait4(r1, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) tkill(r0, 0x2a) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={0x0, 0x8, 0x1, [0x7f, 0x628f, 0x10001, 0x1, 0x2], [0x4, 0x81, 0x7, 0xfffffffffffffffe, 0x1, 0x4fc6, 0x7, 0x7ff, 0x1, 0x7, 0x7, 0x5, 0x6d5d202d, 0x9, 0x80000001, 0x4, 0x8, 0x5, 0x10100000, 0xfa, 0x20, 0x4, 0x81, 0x69ab, 0x401, 0x3, 0x7, 0x43, 0xffffffff, 0xb14, 0x8, 0x1000000000, 0x4, 0x3, 0x3ff, 0x8, 0x5, 0x4, 0x8, 0xe2, 0x1000, 0x9, 0x4, 0x9, 0x5, 0x8, 0x6, 0x6, 0xe3, 0x6, 0x163451fd, 0xe0, 0x2, 0x2, 0xfffffffffffffff8, 0x8, 0x10000, 0x4, 0x3, 0x2, 0x2, 0x40, 0x8, 0xfffffffffffff8f1, 0x5, 0xeda, 0x10000, 0x4, 0x10001, 0x9, 0x2, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0x5, 0x80, 0x8e2, 0x80000000, 0x1, 0x5, 0x6, 0x7, 0x7, 0x6, 0x4, 0x9, 0x2, 0xb37, 0x159, 0x1000, 0x1, 0x10000, 0x800, 0xb56, 0x7ff, 0xdb, 0x0, 0x10000, 0xfffffffffffffffb, 0x8, 0x1000, 0x8, 0x7, 0x4, 0x3, 0x5, 0x2, 0x7fffffff, 0x8, 0x4, 0x2, 0x7, 0x5, 0xffffffff, 0x7, 0x7, 0x100000001, 0x1000000009, 0x3, 0x7]}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:44 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) wait4(r0, 0x0, 0x0, &(0x7f0000000140)) [ 91.904091][ T4541] do_syscall_64+0x44/0xa0 [ 91.908507][ T4541] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 91.914403][ T4541] RIP: 0033:0x7fa0e83dda39 [ 91.918812][ T4541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 91.938413][ T4541] RSP: 002b:00007fa0e6154188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 91.946897][ T4541] RAX: ffffffffffffffda RBX: 00007fa0e84e0f60 RCX: 00007fa0e83dda39 23:59:44 executing program 4: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000600)="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", 0x200) sendfile(0xffffffffffffffff, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r2, 0xffffffffffffffff, 0x0, 0xffffff04) [ 91.954866][ T4541] RDX: 0000000020000080 RSI: 0000000020000300 RDI: 0000000000000000 [ 91.962852][ T4541] RBP: 00007fa0e61541d0 R08: 0000000020001e80 R09: 0000000000000000 [ 91.970817][ T4541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 91.978785][ T4541] R13: 00007fff114821bf R14: 00007fa0e6154300 R15: 0000000000022000 [ 91.988926][ T4544] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 23:59:44 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 19) 23:59:44 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() wait4(0x0, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) tkill(r0, 0x2a) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={0x0, 0x8, 0x1, [0x7f, 0x628f, 0x10001, 0x1, 0x2], [0x4, 0x81, 0x7, 0xfffffffffffffffe, 0x1, 0x4fc6, 0x7, 0x7ff, 0x1, 0x7, 0x7, 0x5, 0x6d5d202d, 0x9, 0x80000001, 0x4, 0x8, 0x5, 0x10100000, 0xfa, 0x20, 0x4, 0x81, 0x69ab, 0x401, 0x3, 0x7, 0x43, 0xffffffff, 0xb14, 0x8, 0x1000000000, 0x4, 0x3, 0x3ff, 0x8, 0x5, 0x4, 0x8, 0xe2, 0x1000, 0x9, 0x4, 0x9, 0x5, 0x8, 0x6, 0x6, 0xe3, 0x6, 0x163451fd, 0xe0, 0x2, 0x2, 0xfffffffffffffff8, 0x8, 0x10000, 0x4, 0x3, 0x2, 0x2, 0x40, 0x8, 0xfffffffffffff8f1, 0x5, 0xeda, 0x10000, 0x4, 0x10001, 0x9, 0x2, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0x5, 0x80, 0x8e2, 0x80000000, 0x1, 0x5, 0x6, 0x7, 0x7, 0x6, 0x4, 0x9, 0x2, 0xb37, 0x159, 0x1000, 0x1, 0x10000, 0x800, 0xb56, 0x7ff, 0xdb, 0x0, 0x10000, 0xfffffffffffffffb, 0x8, 0x1000, 0x8, 0x7, 0x4, 0x3, 0x5, 0x2, 0x7fffffff, 0x8, 0x4, 0x2, 0x7, 0x5, 0xffffffff, 0x7, 0x7, 0x100000001, 0x1000000009, 0x3, 0x7]}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 92.096344][ T4562] FAULT_INJECTION: forcing a failure. [ 92.096344][ T4562] name failslab, interval 1, probability 0, space 0, times 0 [ 92.108980][ T4562] CPU: 0 PID: 4562 Comm: syz-executor.0 Not tainted 5.15.0-rc6-syzkaller #0 [ 92.116275][ T4566] loop4: detected capacity change from 0 to 264192 [ 92.117641][ T4562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 92.117686][ T4562] Call Trace: [ 92.137462][ T4562] dump_stack_lvl+0xd6/0x122 [ 92.142048][ T4562] dump_stack+0x11/0x1b [ 92.146420][ T4562] should_fail+0x23c/0x250 [ 92.150942][ T4562] ? p9_client_prepare_req+0xaf/0x4e0 [ 92.156304][ T4562] __should_failslab+0x81/0x90 [ 92.161131][ T4562] should_failslab+0x5/0x20 [ 92.165625][ T4562] kmem_cache_alloc+0x4f/0x300 [ 92.170372][ T4562] p9_client_prepare_req+0xaf/0x4e0 [ 92.175634][ T4562] p9_client_rpc+0xa8/0x660 [ 92.180125][ T4562] ? _raw_spin_unlock_bh+0x33/0x40 [ 92.185222][ T4562] ? packet_poll+0x384/0x3d0 [ 92.189801][ T4562] ? con_flush_chars+0x400/0x400 [ 92.194797][ T4562] ? sock_poll+0x23e/0x260 [ 92.199197][ T4562] ? packet_getname+0x190/0x190 [ 92.204081][ T4562] ? sock_write_iter+0x200/0x200 [ 92.209046][ T4562] p9_client_version+0xa0/0x310 [ 92.213950][ T4562] p9_client_create+0x631/0x720 [ 92.218817][ T4562] v9fs_session_init+0x100/0xd50 [ 92.223733][ T4562] ? avc_has_perm_noaudit+0x1c0/0x270 [ 92.229084][ T4562] ? should_fail+0xd6/0x250 [ 92.233572][ T4562] ? kmem_cache_alloc_trace+0x221/0x320 [ 92.239158][ T4562] ? v9fs_mount+0x41/0x4c0 [ 92.243704][ T4562] v9fs_mount+0x57/0x4c0 [ 92.247929][ T4562] ? selinux_capable+0x34/0x40 [ 92.252725][ T4562] ? tsan.module_ctor+0x10/0x10 [ 92.257568][ T4562] legacy_get_tree+0x70/0xc0 [ 92.262149][ T4562] vfs_get_tree+0x4a/0x1a0 [ 92.266546][ T4562] path_mount+0x11ec/0x1d20 [ 92.271044][ T4562] __se_sys_mount+0x24b/0x2f0 [ 92.275758][ T4562] ? fput+0x2d/0x130 [ 92.279641][ T4562] __x64_sys_mount+0x63/0x70 [ 92.284223][ T4562] do_syscall_64+0x44/0xa0 [ 92.288622][ T4562] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 92.294592][ T4562] RIP: 0033:0x7fa0e83dda39 [ 92.299026][ T4562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 92.318652][ T4562] RSP: 002b:00007fa0e6154188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 92.327044][ T4562] RAX: ffffffffffffffda RBX: 00007fa0e84e0f60 RCX: 00007fa0e83dda39 [ 92.334995][ T4562] RDX: 0000000020000080 RSI: 0000000020000300 RDI: 0000000000000000 23:59:44 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) wait4(r0, 0x0, 0x0, &(0x7f0000000140)) 23:59:44 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x0) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 92.342947][ T4562] RBP: 00007fa0e61541d0 R08: 0000000020001e80 R09: 0000000000000000 [ 92.350917][ T4562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 92.358894][ T4562] R13: 00007fff114821bf R14: 00007fa0e6154300 R15: 0000000000022000 [ 92.374560][ T4566] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 23:59:44 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 20) 23:59:44 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() wait4(0x0, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) tkill(r0, 0x2a) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={0x0, 0x8, 0x1, [0x7f, 0x628f, 0x10001, 0x1, 0x2], [0x4, 0x81, 0x7, 0xfffffffffffffffe, 0x1, 0x4fc6, 0x7, 0x7ff, 0x1, 0x7, 0x7, 0x5, 0x6d5d202d, 0x9, 0x80000001, 0x4, 0x8, 0x5, 0x10100000, 0xfa, 0x20, 0x4, 0x81, 0x69ab, 0x401, 0x3, 0x7, 0x43, 0xffffffff, 0xb14, 0x8, 0x1000000000, 0x4, 0x3, 0x3ff, 0x8, 0x5, 0x4, 0x8, 0xe2, 0x1000, 0x9, 0x4, 0x9, 0x5, 0x8, 0x6, 0x6, 0xe3, 0x6, 0x163451fd, 0xe0, 0x2, 0x2, 0xfffffffffffffff8, 0x8, 0x10000, 0x4, 0x3, 0x2, 0x2, 0x40, 0x8, 0xfffffffffffff8f1, 0x5, 0xeda, 0x10000, 0x4, 0x10001, 0x9, 0x2, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0x5, 0x80, 0x8e2, 0x80000000, 0x1, 0x5, 0x6, 0x7, 0x7, 0x6, 0x4, 0x9, 0x2, 0xb37, 0x159, 0x1000, 0x1, 0x10000, 0x800, 0xb56, 0x7ff, 0xdb, 0x0, 0x10000, 0xfffffffffffffffb, 0x8, 0x1000, 0x8, 0x7, 0x4, 0x3, 0x5, 0x2, 0x7fffffff, 0x8, 0x4, 0x2, 0x7, 0x5, 0xffffffff, 0x7, 0x7, 0x100000001, 0x1000000009, 0x3, 0x7]}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 92.523588][ T4578] FAULT_INJECTION: forcing a failure. [ 92.523588][ T4578] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 92.536859][ T4578] CPU: 0 PID: 4578 Comm: syz-executor.0 Not tainted 5.15.0-rc6-syzkaller #0 [ 92.545572][ T4578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 92.555624][ T4578] Call Trace: [ 92.558966][ T4578] dump_stack_lvl+0xd6/0x122 [ 92.563618][ T4578] dump_stack+0x11/0x1b [ 92.567783][ T4578] should_fail+0x23c/0x250 [ 92.572286][ T4578] __alloc_pages+0x102/0x320 [ 92.576873][ T4578] kmem_getpages+0x1a/0xd0 [ 92.581332][ T4578] cache_grow_begin+0x4c/0x1a0 [ 92.586152][ T4578] cache_alloc_refill+0x326/0x3d0 [ 92.591162][ T4578] ? should_fail+0xd6/0x250 [ 92.595663][ T4578] ? p9_client_prepare_req+0xaf/0x4e0 [ 92.601026][ T4578] kmem_cache_alloc+0x278/0x300 [ 92.605876][ T4578] ? p9_client_prepare_req+0xaf/0x4e0 [ 92.611309][ T4578] p9_client_prepare_req+0xaf/0x4e0 [ 92.616496][ T4578] p9_client_rpc+0xa8/0x660 [ 92.621125][ T4578] ? _raw_spin_unlock_bh+0x33/0x40 [ 92.626278][ T4578] ? packet_poll+0x384/0x3d0 [ 92.630858][ T4578] ? con_flush_chars+0x400/0x400 [ 92.635779][ T4578] ? sock_poll+0x23e/0x260 [ 92.640188][ T4578] ? packet_getname+0x190/0x190 [ 92.645026][ T4578] ? sock_write_iter+0x200/0x200 [ 92.649955][ T4578] p9_client_version+0xa0/0x310 [ 92.654848][ T4578] p9_client_create+0x631/0x720 [ 92.659814][ T4578] v9fs_session_init+0x100/0xd50 [ 92.664739][ T4578] ? avc_has_perm_noaudit+0x1c0/0x270 [ 92.670090][ T4578] ? should_fail+0xd6/0x250 [ 92.674643][ T4578] ? kmem_cache_alloc_trace+0x221/0x320 [ 92.680168][ T4578] ? v9fs_mount+0x41/0x4c0 [ 92.684669][ T4578] v9fs_mount+0x57/0x4c0 [ 92.688953][ T4578] ? selinux_capable+0x34/0x40 [ 92.693707][ T4578] ? tsan.module_ctor+0x10/0x10 [ 92.698636][ T4578] legacy_get_tree+0x70/0xc0 [ 92.703225][ T4578] vfs_get_tree+0x4a/0x1a0 [ 92.707824][ T4578] path_mount+0x11ec/0x1d20 [ 92.712367][ T4578] __se_sys_mount+0x24b/0x2f0 [ 92.717033][ T4578] ? fput+0x2d/0x130 [ 92.720955][ T4578] __x64_sys_mount+0x63/0x70 [ 92.725528][ T4578] do_syscall_64+0x44/0xa0 [ 92.729952][ T4578] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 92.735843][ T4578] RIP: 0033:0x7fa0e83dda39 [ 92.740244][ T4578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 92.759908][ T4578] RSP: 002b:00007fa0e6154188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 23:59:45 executing program 4: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000600)="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", 0x200) sendfile(0xffffffffffffffff, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r2, 0xffffffffffffffff, 0x0, 0xffffff04) [ 92.768753][ T4578] RAX: ffffffffffffffda RBX: 00007fa0e84e0f60 RCX: 00007fa0e83dda39 [ 92.776712][ T4578] RDX: 0000000020000080 RSI: 0000000020000300 RDI: 0000000000000000 [ 92.784665][ T4578] RBP: 00007fa0e61541d0 R08: 0000000020001e80 R09: 0000000000000000 [ 92.792618][ T4578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 92.800577][ T4578] R13: 00007fff114821bf R14: 00007fa0e6154300 R15: 0000000000022000 [ 92.815891][ T57] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 23:59:45 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) 23:59:45 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x0) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:45 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) wait4(r0, 0x0, 0x0, 0x0) 23:59:45 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 21) 23:59:45 executing program 4: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r2, r0, 0x0, 0xffffff04) 23:59:45 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() wait4(0x0, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) tkill(r0, 0x2a) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={0x0, 0x8, 0x1, [0x7f, 0x628f, 0x10001, 0x1, 0x2], [0x4, 0x81, 0x7, 0xfffffffffffffffe, 0x1, 0x4fc6, 0x7, 0x7ff, 0x1, 0x7, 0x7, 0x5, 0x6d5d202d, 0x9, 0x80000001, 0x4, 0x8, 0x5, 0x10100000, 0xfa, 0x20, 0x4, 0x81, 0x69ab, 0x401, 0x3, 0x7, 0x43, 0xffffffff, 0xb14, 0x8, 0x1000000000, 0x4, 0x3, 0x3ff, 0x8, 0x5, 0x4, 0x8, 0xe2, 0x1000, 0x9, 0x4, 0x9, 0x5, 0x8, 0x6, 0x6, 0xe3, 0x6, 0x163451fd, 0xe0, 0x2, 0x2, 0xfffffffffffffff8, 0x8, 0x10000, 0x4, 0x3, 0x2, 0x2, 0x40, 0x8, 0xfffffffffffff8f1, 0x5, 0xeda, 0x10000, 0x4, 0x10001, 0x9, 0x2, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0x5, 0x80, 0x8e2, 0x80000000, 0x1, 0x5, 0x6, 0x7, 0x7, 0x6, 0x4, 0x9, 0x2, 0xb37, 0x159, 0x1000, 0x1, 0x10000, 0x800, 0xb56, 0x7ff, 0xdb, 0x0, 0x10000, 0xfffffffffffffffb, 0x8, 0x1000, 0x8, 0x7, 0x4, 0x3, 0x5, 0x2, 0x7fffffff, 0x8, 0x4, 0x2, 0x7, 0x5, 0xffffffff, 0x7, 0x7, 0x100000001, 0x1000000009, 0x3, 0x7]}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:45 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(0x0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:45 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 92.927127][ T4593] loop4: detected capacity change from 0 to 264192 [ 92.955145][ T4593] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 23:59:45 executing program 4: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r2, r0, 0x0, 0xffffff04) 23:59:45 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) r1 = gettid() wait4(r1, 0x0, 0x4, &(0x7f00000002c0)) tkill(r0, 0x2a) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={0x0, 0x8, 0x1, [0x7f, 0x628f, 0x10001, 0x1, 0x2], [0x4, 0x81, 0x7, 0xfffffffffffffffe, 0x1, 0x4fc6, 0x7, 0x7ff, 0x1, 0x7, 0x7, 0x5, 0x6d5d202d, 0x9, 0x80000001, 0x4, 0x8, 0x5, 0x10100000, 0xfa, 0x20, 0x4, 0x81, 0x69ab, 0x401, 0x3, 0x7, 0x43, 0xffffffff, 0xb14, 0x8, 0x1000000000, 0x4, 0x3, 0x3ff, 0x8, 0x5, 0x4, 0x8, 0xe2, 0x1000, 0x9, 0x4, 0x9, 0x5, 0x8, 0x6, 0x6, 0xe3, 0x6, 0x163451fd, 0xe0, 0x2, 0x2, 0xfffffffffffffff8, 0x8, 0x10000, 0x4, 0x3, 0x2, 0x2, 0x40, 0x8, 0xfffffffffffff8f1, 0x5, 0xeda, 0x10000, 0x4, 0x10001, 0x9, 0x2, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0x5, 0x80, 0x8e2, 0x80000000, 0x1, 0x5, 0x6, 0x7, 0x7, 0x6, 0x4, 0x9, 0x2, 0xb37, 0x159, 0x1000, 0x1, 0x10000, 0x800, 0xb56, 0x7ff, 0xdb, 0x0, 0x10000, 0xfffffffffffffffb, 0x8, 0x1000, 0x8, 0x7, 0x4, 0x3, 0x5, 0x2, 0x7fffffff, 0x8, 0x4, 0x2, 0x7, 0x5, 0xffffffff, 0x7, 0x7, 0x100000001, 0x1000000009, 0x3, 0x7]}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 92.994463][ T4598] FAULT_INJECTION: forcing a failure. [ 92.994463][ T4598] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 93.007665][ T4598] CPU: 0 PID: 4598 Comm: syz-executor.0 Not tainted 5.15.0-rc6-syzkaller #0 [ 93.016336][ T4598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 93.026380][ T4598] Call Trace: [ 93.029652][ T4598] dump_stack_lvl+0xd6/0x122 [ 93.034247][ T4598] dump_stack+0x11/0x1b [ 93.038411][ T4598] should_fail+0x23c/0x250 [ 93.042831][ T4598] __alloc_pages+0x102/0x320 [ 93.047417][ T4598] kmem_getpages+0x1a/0xd0 [ 93.051912][ T4598] cache_grow_begin+0x4c/0x1a0 [ 93.056692][ T4598] cache_alloc_refill+0x326/0x3d0 [ 93.061776][ T4598] ? should_fail+0xd6/0x250 [ 93.066274][ T4598] ? p9_fcall_init+0xad/0x100 [ 93.070954][ T4598] __kmalloc+0x2c6/0x350 [ 93.075244][ T4598] ? p9_fcall_init+0xad/0x100 [ 93.079907][ T4598] p9_fcall_init+0xad/0x100 [ 93.084405][ T4598] p9_client_prepare_req+0xec/0x4e0 [ 93.089642][ T4598] p9_client_rpc+0xa8/0x660 [ 93.094129][ T4598] ? _raw_spin_unlock_bh+0x33/0x40 [ 93.099272][ T4598] ? packet_poll+0x384/0x3d0 [ 93.103964][ T4598] ? con_flush_chars+0x400/0x400 [ 93.108914][ T4598] ? sock_poll+0x23e/0x260 [ 93.113335][ T4598] ? packet_getname+0x190/0x190 [ 93.118175][ T4598] ? sock_write_iter+0x200/0x200 [ 93.123103][ T4598] p9_client_version+0xa0/0x310 [ 93.127967][ T4598] p9_client_create+0x631/0x720 [ 93.132821][ T4598] v9fs_session_init+0x100/0xd50 [ 93.137827][ T4598] ? avc_has_perm_noaudit+0x1c0/0x270 [ 93.143281][ T4598] ? should_fail+0xd6/0x250 [ 93.147777][ T4598] ? kmem_cache_alloc_trace+0x221/0x320 [ 93.153324][ T4598] ? v9fs_mount+0x41/0x4c0 [ 93.157738][ T4598] v9fs_mount+0x57/0x4c0 [ 93.162010][ T4598] ? selinux_capable+0x34/0x40 [ 93.166762][ T4598] ? tsan.module_ctor+0x10/0x10 [ 93.171615][ T4598] legacy_get_tree+0x70/0xc0 [ 93.176238][ T4598] vfs_get_tree+0x4a/0x1a0 [ 93.180665][ T4598] path_mount+0x11ec/0x1d20 [ 93.185148][ T4598] __se_sys_mount+0x24b/0x2f0 [ 93.189805][ T4598] ? fput+0x2d/0x130 [ 93.193715][ T4598] __x64_sys_mount+0x63/0x70 [ 93.198320][ T4598] do_syscall_64+0x44/0xa0 [ 93.202724][ T4598] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 93.208674][ T4598] RIP: 0033:0x7fa0e83dda39 [ 93.213069][ T4598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 93.232801][ T4598] RSP: 002b:00007fa0e6154188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 93.241207][ T4598] RAX: ffffffffffffffda RBX: 00007fa0e84e0f60 RCX: 00007fa0e83dda39 [ 93.249176][ T4598] RDX: 0000000020000080 RSI: 0000000020000300 RDI: 0000000000000000 [ 93.257139][ T4598] RBP: 00007fa0e61541d0 R08: 0000000020001e80 R09: 0000000000000000 [ 93.265180][ T4598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 93.273182][ T4598] R13: 00007fff114821bf R14: 00007fa0e6154300 R15: 0000000000022000 23:59:45 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 22) 23:59:45 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) r1 = gettid() wait4(r1, 0x0, 0x4, &(0x7f00000002c0)) tkill(r0, 0x2a) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={0x0, 0x8, 0x1, [0x7f, 0x628f, 0x10001, 0x1, 0x2], [0x4, 0x81, 0x7, 0xfffffffffffffffe, 0x1, 0x4fc6, 0x7, 0x7ff, 0x1, 0x7, 0x7, 0x5, 0x6d5d202d, 0x9, 0x80000001, 0x4, 0x8, 0x5, 0x10100000, 0xfa, 0x20, 0x4, 0x81, 0x69ab, 0x401, 0x3, 0x7, 0x43, 0xffffffff, 0xb14, 0x8, 0x1000000000, 0x4, 0x3, 0x3ff, 0x8, 0x5, 0x4, 0x8, 0xe2, 0x1000, 0x9, 0x4, 0x9, 0x5, 0x8, 0x6, 0x6, 0xe3, 0x6, 0x163451fd, 0xe0, 0x2, 0x2, 0xfffffffffffffff8, 0x8, 0x10000, 0x4, 0x3, 0x2, 0x2, 0x40, 0x8, 0xfffffffffffff8f1, 0x5, 0xeda, 0x10000, 0x4, 0x10001, 0x9, 0x2, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0x5, 0x80, 0x8e2, 0x80000000, 0x1, 0x5, 0x6, 0x7, 0x7, 0x6, 0x4, 0x9, 0x2, 0xb37, 0x159, 0x1000, 0x1, 0x10000, 0x800, 0xb56, 0x7ff, 0xdb, 0x0, 0x10000, 0xfffffffffffffffb, 0x8, 0x1000, 0x8, 0x7, 0x4, 0x3, 0x5, 0x2, 0x7fffffff, 0x8, 0x4, 0x2, 0x7, 0x5, 0xffffffff, 0x7, 0x7, 0x100000001, 0x1000000009, 0x3, 0x7]}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 93.355030][ T4616] loop4: detected capacity change from 0 to 264192 [ 93.367104][ T4618] FAULT_INJECTION: forcing a failure. [ 93.367104][ T4618] name failslab, interval 1, probability 0, space 0, times 0 [ 93.379691][ T4618] CPU: 0 PID: 4618 Comm: syz-executor.0 Not tainted 5.15.0-rc6-syzkaller #0 [ 93.388397][ T4618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 93.398444][ T4618] Call Trace: [ 93.401794][ T4618] dump_stack_lvl+0xd6/0x122 [ 93.406388][ T4618] dump_stack+0x11/0x1b [ 93.410607][ T4618] should_fail+0x23c/0x250 [ 93.415014][ T4618] ? radix_tree_node_alloc+0x154/0x1f0 [ 93.420465][ T4618] __should_failslab+0x81/0x90 [ 93.425234][ T4618] should_failslab+0x5/0x20 [ 93.429730][ T4618] kmem_cache_alloc+0x4f/0x300 [ 93.434480][ T4618] ? mod_objcg_state+0x3ff/0x650 [ 93.439419][ T4618] radix_tree_node_alloc+0x154/0x1f0 [ 93.444707][ T4618] idr_get_free+0x22a/0x5d0 [ 93.449218][ T4618] idr_alloc+0xdf/0x1a0 [ 93.453375][ T4618] p9_client_prepare_req+0x2f6/0x4e0 [ 93.458705][ T4618] p9_client_rpc+0xa8/0x660 [ 93.463238][ T4618] ? _raw_spin_unlock_bh+0x33/0x40 [ 93.468333][ T4618] ? packet_poll+0x384/0x3d0 [ 93.472905][ T4618] ? con_flush_chars+0x400/0x400 [ 93.477835][ T4618] ? sock_poll+0x23e/0x260 [ 93.482242][ T4618] ? packet_getname+0x190/0x190 [ 93.487168][ T4618] ? sock_write_iter+0x200/0x200 [ 93.492113][ T4618] p9_client_version+0xa0/0x310 [ 93.496948][ T4618] p9_client_create+0x631/0x720 [ 93.501784][ T4618] v9fs_session_init+0x100/0xd50 [ 93.506742][ T4618] ? avc_has_perm_noaudit+0x1c0/0x270 [ 93.512143][ T4618] ? should_fail+0xd6/0x250 [ 93.516634][ T4618] ? kmem_cache_alloc_trace+0x221/0x320 [ 93.522171][ T4618] ? v9fs_mount+0x41/0x4c0 [ 93.526616][ T4618] v9fs_mount+0x57/0x4c0 [ 93.530856][ T4618] ? selinux_capable+0x34/0x40 [ 93.535608][ T4618] ? tsan.module_ctor+0x10/0x10 [ 93.540455][ T4618] legacy_get_tree+0x70/0xc0 [ 93.545043][ T4618] vfs_get_tree+0x4a/0x1a0 [ 93.549449][ T4618] path_mount+0x11ec/0x1d20 [ 93.553939][ T4618] __se_sys_mount+0x24b/0x2f0 [ 93.558618][ T4618] ? fput+0x2d/0x130 [ 93.562560][ T4618] __x64_sys_mount+0x63/0x70 [ 93.567153][ T4618] do_syscall_64+0x44/0xa0 [ 93.571613][ T4618] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 93.577490][ T4618] RIP: 0033:0x7fa0e83dda39 [ 93.581906][ T4618] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 93.601510][ T4618] RSP: 002b:00007fa0e6154188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 93.609910][ T4618] RAX: ffffffffffffffda RBX: 00007fa0e84e0f60 RCX: 00007fa0e83dda39 [ 93.617968][ T4618] RDX: 0000000020000080 RSI: 0000000020000300 RDI: 0000000000000000 [ 93.625975][ T4618] RBP: 00007fa0e61541d0 R08: 0000000020001e80 R09: 0000000000000000 [ 93.633926][ T4618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 93.641959][ T4618] R13: 00007fff114821bf R14: 00007fa0e6154300 R15: 0000000000022000 [ 93.652375][ T22] audit: type=1400 audit(1635206385.949:155): avc: denied { remove_name } for pid=363 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.674795][ T22] audit: type=1400 audit(1635206385.949:156): avc: denied { rename } for pid=363 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 93.704904][ T4616] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 23:59:46 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) 23:59:46 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(0x0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:46 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:46 executing program 4: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r2, r0, 0x0, 0xffffff04) 23:59:46 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 23) [ 93.794726][ T4625] loop4: detected capacity change from 0 to 264192 [ 93.802117][ T4629] FAULT_INJECTION: forcing a failure. [ 93.802117][ T4629] name failslab, interval 1, probability 0, space 0, times 0 [ 93.814703][ T4629] CPU: 1 PID: 4629 Comm: syz-executor.0 Not tainted 5.15.0-rc6-syzkaller #0 [ 93.823366][ T4629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 93.833414][ T4629] Call Trace: [ 93.836678][ T4629] dump_stack_lvl+0xd6/0x122 [ 93.841282][ T4629] dump_stack+0x11/0x1b [ 93.845420][ T4629] should_fail+0x23c/0x250 [ 93.849820][ T4629] ? radix_tree_node_alloc+0x154/0x1f0 [ 93.855261][ T4629] __should_failslab+0x81/0x90 [ 93.860066][ T4629] should_failslab+0x5/0x20 [ 93.864555][ T4629] kmem_cache_alloc+0x4f/0x300 [ 93.869299][ T4629] ? radix_tree_node_alloc+0x154/0x1f0 [ 93.874747][ T4629] radix_tree_node_alloc+0x154/0x1f0 [ 93.880016][ T4629] idr_get_free+0x22a/0x5d0 [ 93.884517][ T4629] idr_alloc+0xdf/0x1a0 [ 93.888662][ T4629] p9_client_prepare_req+0x2f6/0x4e0 [ 93.893940][ T4629] p9_client_rpc+0xa8/0x660 [ 93.898427][ T4629] ? _raw_spin_unlock_bh+0x33/0x40 [ 93.903561][ T4629] ? packet_poll+0x384/0x3d0 [ 93.908137][ T4629] ? con_flush_chars+0x400/0x400 [ 93.913157][ T4629] ? sock_poll+0x23e/0x260 [ 93.917603][ T4629] ? packet_getname+0x190/0x190 [ 93.922502][ T4629] ? sock_write_iter+0x200/0x200 [ 93.927424][ T4629] p9_client_version+0xa0/0x310 [ 93.932315][ T4629] p9_client_create+0x631/0x720 [ 93.937266][ T4629] v9fs_session_init+0x100/0xd50 [ 93.942191][ T4629] ? avc_has_perm_noaudit+0x1c0/0x270 [ 93.947543][ T4629] ? should_fail+0xd6/0x250 [ 93.952039][ T4629] ? kmem_cache_alloc_trace+0x221/0x320 [ 93.957571][ T4629] ? v9fs_mount+0x41/0x4c0 [ 93.961973][ T4629] v9fs_mount+0x57/0x4c0 [ 93.966288][ T4629] ? selinux_capable+0x34/0x40 [ 93.971212][ T4629] ? tsan.module_ctor+0x10/0x10 [ 93.976057][ T4629] legacy_get_tree+0x70/0xc0 [ 93.980682][ T4629] vfs_get_tree+0x4a/0x1a0 [ 93.985144][ T4629] path_mount+0x11ec/0x1d20 [ 93.989633][ T4629] __se_sys_mount+0x24b/0x2f0 [ 93.994300][ T4629] ? fput+0x2d/0x130 [ 93.998182][ T4629] __x64_sys_mount+0x63/0x70 [ 94.002757][ T4629] do_syscall_64+0x44/0xa0 [ 94.007161][ T4629] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 94.013146][ T4629] RIP: 0033:0x7fa0e83dda39 [ 94.017545][ T4629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 94.037243][ T4629] RSP: 002b:00007fa0e6154188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 23:59:46 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) r1 = gettid() wait4(r1, 0x0, 0x4, &(0x7f00000002c0)) tkill(r0, 0x2a) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={0x0, 0x8, 0x1, [0x7f, 0x628f, 0x10001, 0x1, 0x2], [0x4, 0x81, 0x7, 0xfffffffffffffffe, 0x1, 0x4fc6, 0x7, 0x7ff, 0x1, 0x7, 0x7, 0x5, 0x6d5d202d, 0x9, 0x80000001, 0x4, 0x8, 0x5, 0x10100000, 0xfa, 0x20, 0x4, 0x81, 0x69ab, 0x401, 0x3, 0x7, 0x43, 0xffffffff, 0xb14, 0x8, 0x1000000000, 0x4, 0x3, 0x3ff, 0x8, 0x5, 0x4, 0x8, 0xe2, 0x1000, 0x9, 0x4, 0x9, 0x5, 0x8, 0x6, 0x6, 0xe3, 0x6, 0x163451fd, 0xe0, 0x2, 0x2, 0xfffffffffffffff8, 0x8, 0x10000, 0x4, 0x3, 0x2, 0x2, 0x40, 0x8, 0xfffffffffffff8f1, 0x5, 0xeda, 0x10000, 0x4, 0x10001, 0x9, 0x2, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0x5, 0x80, 0x8e2, 0x80000000, 0x1, 0x5, 0x6, 0x7, 0x7, 0x6, 0x4, 0x9, 0x2, 0xb37, 0x159, 0x1000, 0x1, 0x10000, 0x800, 0xb56, 0x7ff, 0xdb, 0x0, 0x10000, 0xfffffffffffffffb, 0x8, 0x1000, 0x8, 0x7, 0x4, 0x3, 0x5, 0x2, 0x7fffffff, 0x8, 0x4, 0x2, 0x7, 0x5, 0xffffffff, 0x7, 0x7, 0x100000001, 0x1000000009, 0x3, 0x7]}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 94.045636][ T4629] RAX: ffffffffffffffda RBX: 00007fa0e84e0f60 RCX: 00007fa0e83dda39 [ 94.053639][ T4629] RDX: 0000000020000080 RSI: 0000000020000300 RDI: 0000000000000000 [ 94.061599][ T4629] RBP: 00007fa0e61541d0 R08: 0000000020001e80 R09: 0000000000000000 [ 94.069586][ T4629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 94.077541][ T4629] R13: 00007fff114821bf R14: 00007fa0e6154300 R15: 0000000000022000 23:59:46 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 24) 23:59:46 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x1, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) [ 94.091536][ T4625] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 94.138900][ T4639] loop2: detected capacity change from 0 to 264192 [ 94.159129][ T4642] FAULT_INJECTION: forcing a failure. [ 94.159129][ T4642] name failslab, interval 1, probability 0, space 0, times 0 [ 94.171774][ T4642] CPU: 0 PID: 4642 Comm: syz-executor.0 Not tainted 5.15.0-rc6-syzkaller #0 [ 94.180441][ T4642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 94.190490][ T4642] Call Trace: [ 94.193760][ T4642] dump_stack_lvl+0xd6/0x122 [ 94.198388][ T4642] dump_stack+0x11/0x1b [ 94.202592][ T4642] should_fail+0x23c/0x250 [ 94.207006][ T4642] ? radix_tree_node_alloc+0x154/0x1f0 [ 94.212464][ T4642] __should_failslab+0x81/0x90 [ 94.217242][ T4642] should_failslab+0x5/0x20 [ 94.221756][ T4642] kmem_cache_alloc+0x4f/0x300 [ 94.226529][ T4642] ? radix_tree_node_alloc+0x154/0x1f0 [ 94.231987][ T4642] radix_tree_node_alloc+0x154/0x1f0 [ 94.237271][ T4642] idr_get_free+0x22a/0x5d0 [ 94.241823][ T4642] idr_alloc+0xdf/0x1a0 [ 94.245979][ T4642] p9_client_prepare_req+0x2f6/0x4e0 [ 94.251280][ T4642] p9_client_rpc+0xa8/0x660 [ 94.255779][ T4642] ? _raw_spin_unlock_bh+0x33/0x40 [ 94.260954][ T4642] ? packet_poll+0x384/0x3d0 [ 94.265539][ T4642] ? con_flush_chars+0x400/0x400 [ 94.270541][ T4642] ? sock_poll+0x23e/0x260 [ 94.275010][ T4642] ? packet_getname+0x190/0x190 [ 94.279858][ T4642] ? sock_write_iter+0x200/0x200 [ 94.284856][ T4642] p9_client_version+0xa0/0x310 [ 94.289709][ T4642] p9_client_create+0x631/0x720 [ 94.294555][ T4642] v9fs_session_init+0x100/0xd50 [ 94.299492][ T4642] ? avc_has_perm_noaudit+0x1c0/0x270 [ 94.304988][ T4642] ? should_fail+0xd6/0x250 [ 94.309490][ T4642] ? kmem_cache_alloc_trace+0x221/0x320 [ 94.315025][ T4642] ? v9fs_mount+0x41/0x4c0 [ 94.319502][ T4642] v9fs_mount+0x57/0x4c0 [ 94.323747][ T4642] ? selinux_capable+0x34/0x40 [ 94.328544][ T4642] ? tsan.module_ctor+0x10/0x10 [ 94.333389][ T4642] legacy_get_tree+0x70/0xc0 [ 94.337965][ T4642] vfs_get_tree+0x4a/0x1a0 [ 94.342520][ T4642] path_mount+0x11ec/0x1d20 [ 94.347036][ T4642] __se_sys_mount+0x24b/0x2f0 [ 94.351697][ T4642] ? fput+0x2d/0x130 [ 94.355652][ T4642] __x64_sys_mount+0x63/0x70 [ 94.360293][ T4642] do_syscall_64+0x44/0xa0 [ 94.364721][ T4642] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 94.370606][ T4642] RIP: 0033:0x7fa0e83dda39 [ 94.375045][ T4642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 94.394645][ T4642] RSP: 002b:00007fa0e6154188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 94.403037][ T4642] RAX: ffffffffffffffda RBX: 00007fa0e84e0f60 RCX: 00007fa0e83dda39 [ 94.410991][ T4642] RDX: 0000000020000080 RSI: 0000000020000300 RDI: 0000000000000000 [ 94.418946][ T4642] RBP: 00007fa0e61541d0 R08: 0000000020001e80 R09: 0000000000000000 [ 94.426949][ T4642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 23:59:46 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) r1 = gettid() wait4(r1, 0x0, 0x4, &(0x7f00000002c0)) tkill(r0, 0x2a) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={0x0, 0x8, 0x1, [0x7f, 0x628f, 0x10001, 0x1, 0x2], [0x4, 0x81, 0x7, 0xfffffffffffffffe, 0x1, 0x4fc6, 0x7, 0x7ff, 0x1, 0x7, 0x7, 0x5, 0x6d5d202d, 0x9, 0x80000001, 0x4, 0x8, 0x5, 0x10100000, 0xfa, 0x20, 0x4, 0x81, 0x69ab, 0x401, 0x3, 0x7, 0x43, 0xffffffff, 0xb14, 0x8, 0x1000000000, 0x4, 0x3, 0x3ff, 0x8, 0x5, 0x4, 0x8, 0xe2, 0x1000, 0x9, 0x4, 0x9, 0x5, 0x8, 0x6, 0x6, 0xe3, 0x6, 0x163451fd, 0xe0, 0x2, 0x2, 0xfffffffffffffff8, 0x8, 0x10000, 0x4, 0x3, 0x2, 0x2, 0x40, 0x8, 0xfffffffffffff8f1, 0x5, 0xeda, 0x10000, 0x4, 0x10001, 0x9, 0x2, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0x5, 0x80, 0x8e2, 0x80000000, 0x1, 0x5, 0x6, 0x7, 0x7, 0x6, 0x4, 0x9, 0x2, 0xb37, 0x159, 0x1000, 0x1, 0x10000, 0x800, 0xb56, 0x7ff, 0xdb, 0x0, 0x10000, 0xfffffffffffffffb, 0x8, 0x1000, 0x8, 0x7, 0x4, 0x3, 0x5, 0x2, 0x7fffffff, 0x8, 0x4, 0x2, 0x7, 0x5, 0xffffffff, 0x7, 0x7, 0x100000001, 0x1000000009, 0x3, 0x7]}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:46 executing program 4: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) fchdir(0xffffffffffffffff) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r2, r0, 0x0, 0xffffff04) [ 94.434902][ T4642] R13: 00007fff114821bf R14: 00007fa0e6154300 R15: 0000000000022000 23:59:46 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(0x0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:46 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) r1 = gettid() wait4(r1, &(0x7f0000000080), 0x0, &(0x7f00000002c0)) tkill(r0, 0x2a) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={0x0, 0x8, 0x1, [0x7f, 0x628f, 0x10001, 0x1, 0x2], [0x4, 0x81, 0x7, 0xfffffffffffffffe, 0x1, 0x4fc6, 0x7, 0x7ff, 0x1, 0x7, 0x7, 0x5, 0x6d5d202d, 0x9, 0x80000001, 0x4, 0x8, 0x5, 0x10100000, 0xfa, 0x20, 0x4, 0x81, 0x69ab, 0x401, 0x3, 0x7, 0x43, 0xffffffff, 0xb14, 0x8, 0x1000000000, 0x4, 0x3, 0x3ff, 0x8, 0x5, 0x4, 0x8, 0xe2, 0x1000, 0x9, 0x4, 0x9, 0x5, 0x8, 0x6, 0x6, 0xe3, 0x6, 0x163451fd, 0xe0, 0x2, 0x2, 0xfffffffffffffff8, 0x8, 0x10000, 0x4, 0x3, 0x2, 0x2, 0x40, 0x8, 0xfffffffffffff8f1, 0x5, 0xeda, 0x10000, 0x4, 0x10001, 0x9, 0x2, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0x5, 0x80, 0x8e2, 0x80000000, 0x1, 0x5, 0x6, 0x7, 0x7, 0x6, 0x4, 0x9, 0x2, 0xb37, 0x159, 0x1000, 0x1, 0x10000, 0x800, 0xb56, 0x7ff, 0xdb, 0x0, 0x10000, 0xfffffffffffffffb, 0x8, 0x1000, 0x8, 0x7, 0x4, 0x3, 0x5, 0x2, 0x7fffffff, 0x8, 0x4, 0x2, 0x7, 0x5, 0xffffffff, 0x7, 0x7, 0x100000001, 0x1000000009, 0x3, 0x7]}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:46 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 25) [ 94.525883][ T4645] loop4: detected capacity change from 0 to 264192 [ 94.542496][ T4645] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 23:59:46 executing program 4: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) fchdir(0xffffffffffffffff) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r2, r0, 0x0, 0xffffff04) 23:59:46 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) wait4(r0, 0x0, 0x0, 0x0) (fail_nth: 1) 23:59:46 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) r1 = gettid() wait4(r1, &(0x7f0000000080), 0x0, 0x0) tkill(r0, 0x2a) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={0x0, 0x8, 0x1, [0x7f, 0x628f, 0x10001, 0x1, 0x2], [0x4, 0x81, 0x7, 0xfffffffffffffffe, 0x1, 0x4fc6, 0x7, 0x7ff, 0x1, 0x7, 0x7, 0x5, 0x6d5d202d, 0x9, 0x80000001, 0x4, 0x8, 0x5, 0x10100000, 0xfa, 0x20, 0x4, 0x81, 0x69ab, 0x401, 0x3, 0x7, 0x43, 0xffffffff, 0xb14, 0x8, 0x1000000000, 0x4, 0x3, 0x3ff, 0x8, 0x5, 0x4, 0x8, 0xe2, 0x1000, 0x9, 0x4, 0x9, 0x5, 0x8, 0x6, 0x6, 0xe3, 0x6, 0x163451fd, 0xe0, 0x2, 0x2, 0xfffffffffffffff8, 0x8, 0x10000, 0x4, 0x3, 0x2, 0x2, 0x40, 0x8, 0xfffffffffffff8f1, 0x5, 0xeda, 0x10000, 0x4, 0x10001, 0x9, 0x2, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0x5, 0x80, 0x8e2, 0x80000000, 0x1, 0x5, 0x6, 0x7, 0x7, 0x6, 0x4, 0x9, 0x2, 0xb37, 0x159, 0x1000, 0x1, 0x10000, 0x800, 0xb56, 0x7ff, 0xdb, 0x0, 0x10000, 0xfffffffffffffffb, 0x8, 0x1000, 0x8, 0x7, 0x4, 0x3, 0x5, 0x2, 0x7fffffff, 0x8, 0x4, 0x2, 0x7, 0x5, 0xffffffff, 0x7, 0x7, 0x100000001, 0x1000000009, 0x3, 0x7]}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 94.600617][ T4639] FAT-fs (loop2): bogus number of FAT sectors [ 94.606788][ T4639] FAT-fs (loop2): Can't find a valid FAT filesystem [ 94.620021][ T4657] 9pnet: Insufficient options for proto=fd [ 94.686712][ T4662] FAULT_INJECTION: forcing a failure. [ 94.686712][ T4662] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 94.699772][ T4662] CPU: 1 PID: 4662 Comm: syz-executor.1 Not tainted 5.15.0-rc6-syzkaller #0 [ 94.700941][ T4666] loop4: detected capacity change from 0 to 264192 [ 94.708469][ T4662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 94.708523][ T4662] Call Trace: [ 94.728479][ T4662] dump_stack_lvl+0xd6/0x122 [ 94.733194][ T4662] dump_stack+0x11/0x1b [ 94.737352][ T4662] should_fail+0x23c/0x250 [ 94.741769][ T4662] should_fail_usercopy+0x16/0x20 [ 94.746792][ T4662] _copy_to_user+0x1c/0x90 [ 94.751267][ T4662] simple_read_from_buffer+0xab/0x120 [ 94.756708][ T4662] proc_fail_nth_read+0x10d/0x150 [ 94.761781][ T4662] ? proc_fault_inject_write+0x230/0x230 [ 94.767404][ T4662] vfs_read+0x1e6/0x750 [ 94.771549][ T4662] ? __fget_light+0x21b/0x260 [ 94.776291][ T4662] ? __cond_resched+0x11/0x40 [ 94.780956][ T4662] ksys_read+0xd9/0x190 [ 94.785143][ T4662] __x64_sys_read+0x3e/0x50 [ 94.789710][ T4662] do_syscall_64+0x44/0xa0 [ 94.794125][ T4662] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 94.800022][ T4662] RIP: 0033:0x7f0be75cb5ec [ 94.804419][ T4662] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 94.824130][ T4662] RSP: 002b:00007f0be538f170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 23:59:47 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:47 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:59:47 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x2, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 94.832528][ T4662] RAX: ffffffffffffffda RBX: 000000000000011f RCX: 00007f0be75cb5ec [ 94.840507][ T4662] RDX: 000000000000000f RSI: 00007f0be538f1e0 RDI: 0000000000000004 [ 94.848460][ T4662] RBP: 00007f0be538f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 94.856412][ T4662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.864377][ T4662] R13: 00007fff2d74b95f R14: 00007f0be538f300 R15: 0000000000022000 23:59:47 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x1, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) 23:59:47 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) wait4(r0, 0x0, 0x0, 0x0) 23:59:47 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) r1 = gettid() wait4(r1, &(0x7f0000000080), 0x0, 0x0) tkill(0x0, 0x2a) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={0x0, 0x8, 0x1, [0x7f, 0x628f, 0x10001, 0x1, 0x2], [0x4, 0x81, 0x7, 0xfffffffffffffffe, 0x1, 0x4fc6, 0x7, 0x7ff, 0x1, 0x7, 0x7, 0x5, 0x6d5d202d, 0x9, 0x80000001, 0x4, 0x8, 0x5, 0x10100000, 0xfa, 0x20, 0x4, 0x81, 0x69ab, 0x401, 0x3, 0x7, 0x43, 0xffffffff, 0xb14, 0x8, 0x1000000000, 0x4, 0x3, 0x3ff, 0x8, 0x5, 0x4, 0x8, 0xe2, 0x1000, 0x9, 0x4, 0x9, 0x5, 0x8, 0x6, 0x6, 0xe3, 0x6, 0x163451fd, 0xe0, 0x2, 0x2, 0xfffffffffffffff8, 0x8, 0x10000, 0x4, 0x3, 0x2, 0x2, 0x40, 0x8, 0xfffffffffffff8f1, 0x5, 0xeda, 0x10000, 0x4, 0x10001, 0x9, 0x2, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0x5, 0x80, 0x8e2, 0x80000000, 0x1, 0x5, 0x6, 0x7, 0x7, 0x6, 0x4, 0x9, 0x2, 0xb37, 0x159, 0x1000, 0x1, 0x10000, 0x800, 0xb56, 0x7ff, 0xdb, 0x0, 0x10000, 0xfffffffffffffffb, 0x8, 0x1000, 0x8, 0x7, 0x4, 0x3, 0x5, 0x2, 0x7fffffff, 0x8, 0x4, 0x2, 0x7, 0x5, 0xffffffff, 0x7, 0x7, 0x100000001, 0x1000000009, 0x3, 0x7]}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:47 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:47 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x3, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 94.936211][ T4666] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 23:59:47 executing program 4: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) fchdir(0xffffffffffffffff) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r2, r0, 0x0, 0xffffff04) 23:59:47 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x7, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 95.012486][ T4686] loop2: detected capacity change from 0 to 264192 [ 95.037652][ T4686] FAT-fs (loop2): bogus number of FAT sectors [ 95.043756][ T4686] FAT-fs (loop2): Can't find a valid FAT filesystem 23:59:47 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) r1 = gettid() wait4(r1, &(0x7f0000000080), 0x0, 0x0) tkill(0x0, 0x2a) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={0x0, 0x8, 0x1, [0x7f, 0x628f, 0x10001, 0x1, 0x2], [0x4, 0x81, 0x7, 0xfffffffffffffffe, 0x1, 0x4fc6, 0x7, 0x7ff, 0x1, 0x7, 0x7, 0x5, 0x6d5d202d, 0x9, 0x80000001, 0x4, 0x8, 0x5, 0x10100000, 0xfa, 0x20, 0x4, 0x81, 0x69ab, 0x401, 0x3, 0x7, 0x43, 0xffffffff, 0xb14, 0x8, 0x1000000000, 0x4, 0x3, 0x3ff, 0x8, 0x5, 0x4, 0x8, 0xe2, 0x1000, 0x9, 0x4, 0x9, 0x5, 0x8, 0x6, 0x6, 0xe3, 0x6, 0x163451fd, 0xe0, 0x2, 0x2, 0xfffffffffffffff8, 0x8, 0x10000, 0x4, 0x3, 0x2, 0x2, 0x40, 0x8, 0xfffffffffffff8f1, 0x5, 0xeda, 0x10000, 0x4, 0x10001, 0x9, 0x2, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0x5, 0x80, 0x8e2, 0x80000000, 0x1, 0x5, 0x6, 0x7, 0x7, 0x6, 0x4, 0x9, 0x2, 0xb37, 0x159, 0x1000, 0x1, 0x10000, 0x800, 0xb56, 0x7ff, 0xdb, 0x0, 0x10000, 0xfffffffffffffffb, 0x8, 0x1000, 0x8, 0x7, 0x4, 0x3, 0x5, 0x2, 0x7fffffff, 0x8, 0x4, 0x2, 0x7, 0x5, 0xffffffff, 0x7, 0x7, 0x100000001, 0x1000000009, 0x3, 0x7]}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 95.079314][ T4696] loop4: detected capacity change from 0 to 264192 [ 95.109257][ T4696] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 23:59:47 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:47 executing program 4: r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) 23:59:47 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) wait4(r0, 0x0, 0x4, 0x0) 23:59:47 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0xa, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:59:48 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x1, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) 23:59:48 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x10, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:59:48 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) r1 = gettid() wait4(r1, &(0x7f0000000080), 0x0, 0x0) tkill(0x0, 0x2a) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={0x0, 0x8, 0x1, [0x7f, 0x628f, 0x10001, 0x1, 0x2], [0x4, 0x81, 0x7, 0xfffffffffffffffe, 0x1, 0x4fc6, 0x7, 0x7ff, 0x1, 0x7, 0x7, 0x5, 0x6d5d202d, 0x9, 0x80000001, 0x4, 0x8, 0x5, 0x10100000, 0xfa, 0x20, 0x4, 0x81, 0x69ab, 0x401, 0x3, 0x7, 0x43, 0xffffffff, 0xb14, 0x8, 0x1000000000, 0x4, 0x3, 0x3ff, 0x8, 0x5, 0x4, 0x8, 0xe2, 0x1000, 0x9, 0x4, 0x9, 0x5, 0x8, 0x6, 0x6, 0xe3, 0x6, 0x163451fd, 0xe0, 0x2, 0x2, 0xfffffffffffffff8, 0x8, 0x10000, 0x4, 0x3, 0x2, 0x2, 0x40, 0x8, 0xfffffffffffff8f1, 0x5, 0xeda, 0x10000, 0x4, 0x10001, 0x9, 0x2, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0x5, 0x80, 0x8e2, 0x80000000, 0x1, 0x5, 0x6, 0x7, 0x7, 0x6, 0x4, 0x9, 0x2, 0xb37, 0x159, 0x1000, 0x1, 0x10000, 0x800, 0xb56, 0x7ff, 0xdb, 0x0, 0x10000, 0xfffffffffffffffb, 0x8, 0x1000, 0x8, 0x7, 0x4, 0x3, 0x5, 0x2, 0x7fffffff, 0x8, 0x4, 0x2, 0x7, 0x5, 0xffffffff, 0x7, 0x7, 0x100000001, 0x1000000009, 0x3, 0x7]}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:48 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:48 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) wait4(r0, 0x0, 0x10, 0x0) 23:59:48 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x22, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:59:48 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) r1 = gettid() wait4(r1, &(0x7f0000000080), 0x0, 0x0) tkill(r0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={0x0, 0x8, 0x1, [0x7f, 0x628f, 0x10001, 0x1, 0x2], [0x4, 0x81, 0x7, 0xfffffffffffffffe, 0x1, 0x4fc6, 0x7, 0x7ff, 0x1, 0x7, 0x7, 0x5, 0x6d5d202d, 0x9, 0x80000001, 0x4, 0x8, 0x5, 0x10100000, 0xfa, 0x20, 0x4, 0x81, 0x69ab, 0x401, 0x3, 0x7, 0x43, 0xffffffff, 0xb14, 0x8, 0x1000000000, 0x4, 0x3, 0x3ff, 0x8, 0x5, 0x4, 0x8, 0xe2, 0x1000, 0x9, 0x4, 0x9, 0x5, 0x8, 0x6, 0x6, 0xe3, 0x6, 0x163451fd, 0xe0, 0x2, 0x2, 0xfffffffffffffff8, 0x8, 0x10000, 0x4, 0x3, 0x2, 0x2, 0x40, 0x8, 0xfffffffffffff8f1, 0x5, 0xeda, 0x10000, 0x4, 0x10001, 0x9, 0x2, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0x5, 0x80, 0x8e2, 0x80000000, 0x1, 0x5, 0x6, 0x7, 0x7, 0x6, 0x4, 0x9, 0x2, 0xb37, 0x159, 0x1000, 0x1, 0x10000, 0x800, 0xb56, 0x7ff, 0xdb, 0x0, 0x10000, 0xfffffffffffffffb, 0x8, 0x1000, 0x8, 0x7, 0x4, 0x3, 0x5, 0x2, 0x7fffffff, 0x8, 0x4, 0x2, 0x7, 0x5, 0xffffffff, 0x7, 0x7, 0x100000001, 0x1000000009, 0x3, 0x7]}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 95.936358][ T4730] loop2: detected capacity change from 0 to 264192 23:59:48 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x300, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:59:48 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 95.996333][ T4730] FAT-fs (loop2): bogus number of FAT sectors [ 96.002427][ T4730] FAT-fs (loop2): Can't find a valid FAT filesystem 23:59:48 executing program 4: r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) 23:59:48 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) wait4(r0, 0x0, 0x11, 0x0) 23:59:48 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x700, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:59:49 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {0x0, 0x0, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) 23:59:49 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0xa00, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:59:49 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) r1 = gettid() wait4(r1, &(0x7f0000000080), 0x0, 0x0) tkill(r0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={0x0, 0x8, 0x1, [0x7f, 0x628f, 0x10001, 0x1, 0x2], [0x4, 0x81, 0x7, 0xfffffffffffffffe, 0x1, 0x4fc6, 0x7, 0x7ff, 0x1, 0x7, 0x7, 0x5, 0x6d5d202d, 0x9, 0x80000001, 0x4, 0x8, 0x5, 0x10100000, 0xfa, 0x20, 0x4, 0x81, 0x69ab, 0x401, 0x3, 0x7, 0x43, 0xffffffff, 0xb14, 0x8, 0x1000000000, 0x4, 0x3, 0x3ff, 0x8, 0x5, 0x4, 0x8, 0xe2, 0x1000, 0x9, 0x4, 0x9, 0x5, 0x8, 0x6, 0x6, 0xe3, 0x6, 0x163451fd, 0xe0, 0x2, 0x2, 0xfffffffffffffff8, 0x8, 0x10000, 0x4, 0x3, 0x2, 0x2, 0x40, 0x8, 0xfffffffffffff8f1, 0x5, 0xeda, 0x10000, 0x4, 0x10001, 0x9, 0x2, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0x5, 0x80, 0x8e2, 0x80000000, 0x1, 0x5, 0x6, 0x7, 0x7, 0x6, 0x4, 0x9, 0x2, 0xb37, 0x159, 0x1000, 0x1, 0x10000, 0x800, 0xb56, 0x7ff, 0xdb, 0x0, 0x10000, 0xfffffffffffffffb, 0x8, 0x1000, 0x8, 0x7, 0x4, 0x3, 0x5, 0x2, 0x7fffffff, 0x8, 0x4, 0x2, 0x7, 0x5, 0xffffffff, 0x7, 0x7, 0x100000001, 0x1000000009, 0x3, 0x7]}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:49 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:49 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) wait4(r0, 0x0, 0x30, 0x0) 23:59:49 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x1020, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:59:49 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x0, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 96.820584][ T4774] loop2: detected capacity change from 0 to 264192 [ 96.839625][ T4774] FAT-fs (loop2): bogus number of FAT sectors [ 96.845737][ T4774] FAT-fs (loop2): Can't find a valid FAT filesystem 23:59:49 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) r1 = gettid() wait4(r1, &(0x7f0000000080), 0x0, 0x0) tkill(r0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={0x0, 0x8, 0x1, [0x7f, 0x628f, 0x10001, 0x1, 0x2], [0x4, 0x81, 0x7, 0xfffffffffffffffe, 0x1, 0x4fc6, 0x7, 0x7ff, 0x1, 0x7, 0x7, 0x5, 0x6d5d202d, 0x9, 0x80000001, 0x4, 0x8, 0x5, 0x10100000, 0xfa, 0x20, 0x4, 0x81, 0x69ab, 0x401, 0x3, 0x7, 0x43, 0xffffffff, 0xb14, 0x8, 0x1000000000, 0x4, 0x3, 0x3ff, 0x8, 0x5, 0x4, 0x8, 0xe2, 0x1000, 0x9, 0x4, 0x9, 0x5, 0x8, 0x6, 0x6, 0xe3, 0x6, 0x163451fd, 0xe0, 0x2, 0x2, 0xfffffffffffffff8, 0x8, 0x10000, 0x4, 0x3, 0x2, 0x2, 0x40, 0x8, 0xfffffffffffff8f1, 0x5, 0xeda, 0x10000, 0x4, 0x10001, 0x9, 0x2, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0x5, 0x80, 0x8e2, 0x80000000, 0x1, 0x5, 0x6, 0x7, 0x7, 0x6, 0x4, 0x9, 0x2, 0xb37, 0x159, 0x1000, 0x1, 0x10000, 0x800, 0xb56, 0x7ff, 0xdb, 0x0, 0x10000, 0xfffffffffffffffb, 0x8, 0x1000, 0x8, 0x7, 0x4, 0x3, 0x5, 0x2, 0x7fffffff, 0x8, 0x4, 0x2, 0x7, 0x5, 0xffffffff, 0x7, 0x7, 0x100000001, 0x1000000009, 0x3, 0x7]}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:49 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) wait4(r0, 0x0, 0x1100, 0x0) 23:59:49 executing program 4: r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) 23:59:49 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x2010, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:59:49 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x2200, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:59:49 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {0x0, 0x0, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba868012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) 23:59:49 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x0, 0x0, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:49 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0xedc0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:59:49 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) r1 = gettid() wait4(r1, &(0x7f0000000080), 0x0, 0x0) tkill(r0, 0x2a) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:49 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) wait4(r0, 0x0, 0x2000, 0x0) 23:59:50 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x1000000, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 97.683376][ T4810] loop2: detected capacity change from 0 to 264192 [ 97.693574][ T4810] FAT-fs (loop2): bogus number of FAT sectors [ 97.699693][ T4810] FAT-fs (loop2): Can't find a valid FAT filesystem 23:59:50 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x0, 0x0, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:50 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) r1 = gettid() wait4(r1, &(0x7f0000000080), 0x0, 0x0) tkill(r0, 0x2a) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:50 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x2000000, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:59:50 executing program 4: syz_mount_image$msdos(0x0, &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) 23:59:50 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x3000000, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:59:50 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) wait4(r0, 0x0, 0x22a0, 0x0) [ 97.923124][ T4844] loop4: detected capacity change from 0 to 264192 23:59:50 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {0x0, 0x0, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) 23:59:50 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x7000000, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:59:50 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x0, 0x0, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:50 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) r1 = gettid() wait4(r1, &(0x7f0000000080), 0x0, 0x0) tkill(r0, 0x2a) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) wait4(0x0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:50 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) wait4(r0, 0x0, 0x3000, 0x0) 23:59:50 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0xa000000, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:59:50 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x0, 0x1, {0x0, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 98.577109][ T4862] loop2: detected capacity change from 0 to 264192 [ 98.613776][ T4862] FAT-fs (loop2): bogus number of FAT sectors [ 98.619895][ T4862] FAT-fs (loop2): Can't find a valid FAT filesystem 23:59:50 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x10000000, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:59:51 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) r1 = gettid() wait4(r1, &(0x7f0000000080), 0x0, 0x0) tkill(r0, 0x2a) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) wait4(0x0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:51 executing program 4: syz_mount_image$msdos(0x0, &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba868012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) 23:59:51 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) wait4(r0, 0x0, 0x3f00, 0x0) 23:59:51 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x0, 0x1, {0x0, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 98.884773][ T4890] loop4: detected capacity change from 0 to 264192 23:59:51 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280), 0x0, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) 23:59:51 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x20100000, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:59:51 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) r1 = gettid() wait4(r1, &(0x7f0000000080), 0x0, 0x0) tkill(r0, 0x2a) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) wait4(0x0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:51 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x0, 0x1, {0x0, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:51 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) wait4(r0, 0x0, 0xa022, 0x0) 23:59:51 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x22000000, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:59:51 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x0, 0x1, {0x0, @usage, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 99.462799][ T4906] loop2: detected capacity change from 0 to 264192 [ 99.476810][ T4906] FAT-fs (loop2): bogus number of FAT sectors [ 99.482966][ T4906] FAT-fs (loop2): Can't find a valid FAT filesystem 23:59:51 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) r1 = gettid() wait4(r1, &(0x7f0000000080), 0x0, 0x0) tkill(r0, 0x2a) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) wait4(r0, 0x0, 0x2, &(0x7f0000000140)) 23:59:51 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x8cffffff, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:59:52 executing program 4: syz_mount_image$msdos(0x0, &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) 23:59:52 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x0, 0x1, {0x0, @usage, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:52 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0xc0ed0000, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 99.802573][ T4933] loop4: detected capacity change from 0 to 264192 23:59:52 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280), 0x0, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) 23:59:52 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) wait4(r0, 0x0, 0x200000, 0x0) 23:59:52 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) r1 = gettid() wait4(r1, &(0x7f0000000080), 0x0, 0x0) tkill(r0, 0x2a) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) wait4(r0, 0x0, 0x2, &(0x7f0000000140)) 23:59:52 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0xf6ffffff, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:59:52 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x0, 0x1, {0x0, @usage, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:52 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0xfeffffff, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 100.328713][ T4939] loop2: detected capacity change from 0 to 264192 [ 100.372028][ T4939] FAT-fs (loop2): bogus number of FAT sectors [ 100.378144][ T4939] FAT-fs (loop2): Can't find a valid FAT filesystem 23:59:52 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) wait4(r0, 0x0, 0x4000000, 0x0) 23:59:52 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0xffff0000, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:59:52 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x0, 0x1, {0x0, @usage=0x2, 0x0, 0x0, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:52 executing program 4: syz_mount_image$msdos(&(0x7f0000000140), 0x0, 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba868012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) 23:59:52 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) r1 = gettid() wait4(r1, &(0x7f0000000080), 0x0, 0x0) tkill(r0, 0x2a) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) wait4(r0, 0x0, 0x2, &(0x7f0000000140)) 23:59:52 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0xffffff8c, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 100.741040][ T4975] loop4: detected capacity change from 0 to 264192 23:59:53 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280), 0x0, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba868012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) 23:59:53 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x0, 0x1, {0x0, @usage=0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:53 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) wait4(r0, 0x0, 0x10000000, 0x0) 23:59:53 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0xfffffff6, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:59:53 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) r1 = gettid() wait4(r1, &(0x7f0000000080), 0x0, 0x0) tkill(r0, 0x2a) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) wait4(r0, &(0x7f0000000100), 0x0, &(0x7f0000000140)) 23:59:53 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x0, 0x1, {0x0, @usage=0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:53 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0xfffffffe, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 101.212896][ T4988] loop2: detected capacity change from 0 to 264192 23:59:53 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x8000000000, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:59:53 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) r1 = gettid() wait4(r1, &(0x7f0000000080), 0x0, 0x0) tkill(r0, 0x2a) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) wait4(r0, &(0x7f0000000100), 0x0, &(0x7f0000000140)) [ 101.294873][ T4988] FAT-fs (loop2): bogus number of FAT sectors [ 101.301003][ T4988] FAT-fs (loop2): Can't find a valid FAT filesystem 23:59:53 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) wait4(r0, 0x0, 0x11000000, 0x0) 23:59:53 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x0, 0x1, {0x0, @usage=0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:53 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0xedc000000000, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:59:54 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) r1 = gettid() wait4(r1, &(0x7f0000000080), 0x0, 0x0) tkill(r0, 0x2a) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) wait4(r0, &(0x7f0000000100), 0x0, &(0x7f0000000140)) 23:59:54 executing program 4: syz_mount_image$msdos(&(0x7f0000000140), 0x0, 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) 23:59:54 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x1000000000000, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:59:54 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) wait4(r0, 0x0, 0x20000000, 0x0) 23:59:54 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d", 0x3, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) 23:59:54 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x0, 0x1, {0x0, @usage=0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 102.067549][ T5022] loop4: detected capacity change from 0 to 264192 [ 102.105196][ T5032] loop2: detected capacity change from 0 to 264192 23:59:54 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x100000000000000, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:59:54 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x0, 0x1, {0x0, @usage=0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 102.113630][ T5032] FAT-fs (loop2): bogus number of FAT sectors [ 102.119741][ T5032] FAT-fs (loop2): Can't find a valid FAT filesystem 23:59:54 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x200000000000000, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:59:54 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x0, 0x1, {0x0, @usage=0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:54 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) r1 = gettid() wait4(r1, &(0x7f0000000080), 0x0, 0x0) tkill(r0, 0x2a) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) wait4(r0, &(0x7f0000000100), 0x2, 0x0) 23:59:54 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x300000000000000, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:59:54 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) wait4(r0, 0x0, 0x30000000, 0x0) 23:59:55 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x700000000000000, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:59:55 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x0, 0x1, {0x0, @usage=0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:55 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) r1 = gettid() wait4(r1, &(0x7f0000000080), 0x0, 0x0) tkill(r0, 0x2a) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) wait4(r0, &(0x7f0000000100), 0x2, 0x0) 23:59:55 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d", 0x3, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) 23:59:55 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) wait4(r0, 0x0, 0x3f000000, 0x0) 23:59:55 executing program 4: syz_mount_image$msdos(&(0x7f0000000140), 0x0, 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) 23:59:55 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0xa00000000000000, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 102.971566][ T5075] loop4: detected capacity change from 0 to 264192 [ 102.987814][ T5079] loop2: detected capacity change from 0 to 264192 23:59:55 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x0, 0x1, {0x0, @usage=0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:55 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x0, 0x1, {0x0, @usage=0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:55 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0xfffffffffffffff, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 103.040006][ T5079] FAT-fs (loop2): bogus number of FAT sectors [ 103.046217][ T5079] FAT-fs (loop2): Can't find a valid FAT filesystem 23:59:55 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x1000000000000000, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:59:55 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x2010000000000000, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:59:55 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) wait4(r0, 0x0, 0xa0220000, 0x0) 23:59:55 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x2200000000000000, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:59:55 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x0, 0x1, {0x0, @usage=0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:56 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d", 0x3, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) 23:59:56 executing program 5: syz_mount_image$msdos(&(0x7f0000000140), 0x0, 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) 23:59:56 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x8000000000000000, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:59:56 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x0, 0x1, {0x0, @usage=0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x500, @usage, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:56 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) wait4(r0, 0x0, 0xfeffffff, 0x0) 23:59:56 executing program 4: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) 23:59:56 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x8cffffff00000000, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:59:56 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0xf6ffffff00000000, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 103.860714][ T5125] loop5: detected capacity change from 0 to 264192 [ 103.883764][ T5132] loop2: detected capacity change from 0 to 264192 [ 103.904255][ T5134] FAT-fs (loop4): bogus number of reserved sectors [ 103.906428][ T5132] FAT-fs (loop2): bogus number of FAT sectors [ 103.910810][ T5134] FAT-fs (loop4): Can't find a valid FAT filesystem [ 103.916889][ T5132] FAT-fs (loop2): Can't find a valid FAT filesystem 23:59:56 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0xfeffffff00000000, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:59:56 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) wait4(r0, 0x0, 0xffffff7f, 0x0) 23:59:56 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x0, 0x1, {0x0, @usage=0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x500, @usage, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:56 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0xffff000000000000, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:59:57 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d4cac", 0x5, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) 23:59:57 executing program 5: syz_mount_image$msdos(&(0x7f0000000140), 0x0, 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) 23:59:57 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0xffffffffffffff0f, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:59:57 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x0, 0x1, {0x0, @usage=0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x500, @usage, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:57 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) wait4(r0, 0x0, 0xfffffffe, 0x0) 23:59:57 executing program 4: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) [ 104.750508][ T5162] loop2: detected capacity change from 0 to 264192 23:59:57 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x2, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 104.793412][ T5173] loop5: detected capacity change from 0 to 264192 [ 104.796471][ T5162] FAT-fs (loop2): bogus number of FAT sectors [ 104.799990][ T5170] FAT-fs (loop4): bogus number of reserved sectors [ 104.806050][ T5162] FAT-fs (loop2): Can't find a valid FAT filesystem [ 104.812525][ T5170] FAT-fs (loop4): Can't find a valid FAT filesystem 23:59:57 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x3, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:59:57 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x0, 0x1, {0x0, @usage=0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x500, @usage=0x2, 0x0, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:57 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x7, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:59:57 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) wait4(r0, 0x0, 0x200000000000, 0x0) 23:59:57 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x0, 0x1, {0x0, @usage=0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x500, @usage=0x2, 0x0, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:57 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0xa, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:59:57 executing program 5: syz_mount_image$msdos(&(0x7f0000000140), 0x0, 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) 23:59:57 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) wait4(r0, 0x0, 0x1000000000000, 0x0) 23:59:57 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x0, 0x1, {0x0, @usage=0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x500, @usage=0x2, 0x0, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:57 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d4cac", 0x5, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) 23:59:57 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x10, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:59:57 executing program 4: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba868012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) [ 105.690129][ T5214] loop2: detected capacity change from 0 to 264192 [ 105.699130][ T5216] FAT-fs (loop4): bogus number of reserved sectors [ 105.705687][ T5216] FAT-fs (loop4): Can't find a valid FAT filesystem [ 105.715116][ T5214] FAT-fs (loop2): bogus number of FAT sectors [ 105.721224][ T5214] FAT-fs (loop2): Can't find a valid FAT filesystem [ 105.730324][ T5218] loop5: detected capacity change from 0 to 264192 23:59:58 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x22, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:59:58 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x0, 0x1, {0x0, @usage=0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x500, @usage=0x2, 0x5, 0x0, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:58 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x300, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:59:58 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) wait4(r0, 0x0, 0x400000000000000, 0x0) [ 105.806952][ T22] audit: type=1400 audit(1635206398.099:157): avc: denied { remount } for pid=5221 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 23:59:58 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x700, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:59:58 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x0, 0x1, {0x0, @usage=0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x500, @usage=0x2, 0x5, 0x0, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:58 executing program 5: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) 23:59:58 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0xa00, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:59:58 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x0, 0x1, {0x0, @usage=0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x500, @usage=0x2, 0x5, 0x0, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:58 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) wait4(r0, 0x0, 0x1000000000000000, 0x0) 23:59:58 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d4cac", 0x5, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) 23:59:58 executing program 4: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) 23:59:58 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x0, 0x1, {0x0, @usage=0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x500, @usage=0x2, 0x5, 0x0, [0x3, 0x8, 0x8, 0x2, 0x9]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 106.613628][ T5256] loop2: detected capacity change from 0 to 264192 [ 106.640840][ T5260] FAT-fs (loop5): bogus number of reserved sectors [ 106.647495][ T5260] FAT-fs (loop5): Can't find a valid FAT filesystem 23:59:58 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x1020, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 106.675622][ T5256] FAT-fs (loop2): bogus number of FAT sectors [ 106.681709][ T5256] FAT-fs (loop2): Can't find a valid FAT filesystem 23:59:59 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x2010, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:59:59 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x0, 0x1, {0x0, @usage=0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x500, @usage=0x2, 0x5, 0x0, [0x3, 0x8, 0x8, 0x2, 0x9]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:59 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x2200, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:59:59 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) wait4(r0, 0x0, 0x1100000000000000, 0x0) 23:59:59 executing program 5: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) 23:59:59 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0xedc0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:59:59 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x0, 0x1, {0x0, @usage=0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x500, @usage=0x2, 0x5, 0x0, [0x3, 0x8, 0x8, 0x2, 0x9]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 23:59:59 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) wait4(r0, 0x0, 0x2000000000000000, 0x0) 23:59:59 executing program 4: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba868012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) 23:59:59 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d4cac17", 0x6}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) [ 107.518615][ T5297] loop2: detected capacity change from 0 to 264192 [ 107.552096][ T5297] FAT-fs (loop2): bogus number of FAT sectors [ 107.557611][ T5304] FAT-fs (loop5): bogus number of reserved sectors 23:59:59 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:59:59 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x0, 0x1, {0x0, @usage=0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x500, @usage=0x2, 0x5, 0x0, [0x3, 0x8, 0x8, 0x2]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 107.558226][ T5297] FAT-fs (loop2): Can't find a valid FAT filesystem [ 107.564776][ T5304] FAT-fs (loop5): Can't find a valid FAT filesystem 23:59:59 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x2000000, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:00:00 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) wait4(r0, 0x0, 0x3000000000000000, 0x0) 00:00:00 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x3000000, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:00:00 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x7000000, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:00:00 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0xa000000, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:00:00 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d4cac17", 0x6}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba868012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) 00:00:00 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x0, 0x1, {0x0, @usage=0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x500, @usage=0x2, 0x5, 0x0, [0x3, 0x8, 0x8, 0x2]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 00:00:00 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) wait4(r0, 0x0, 0x3f00000000000000, 0x0) 00:00:00 executing program 5: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) 00:00:00 executing program 4: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) 00:00:00 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x10000000, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 108.446863][ T5343] FAT-fs (loop5): bogus number of reserved sectors [ 108.453434][ T5343] FAT-fs (loop5): Can't find a valid FAT filesystem [ 108.462616][ T5344] loop2: detected capacity change from 0 to 264192 00:00:00 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x20100000, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:00:00 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x0, 0x1, {0x0, @usage=0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x500, @usage=0x2, 0x5, 0x0, [0x3, 0x8, 0x8, 0x2]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 108.503054][ T5344] FAT-fs (loop2): bogus number of FAT sectors [ 108.509166][ T5344] FAT-fs (loop2): Can't find a valid FAT filesystem 00:00:00 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x22000000, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:00:00 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x0, 0x1, {0x0, @usage=0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x500, @usage=0x2, 0x5, 0x0, [0x3, 0x8, 0x8]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 00:00:00 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) wait4(r0, 0x0, 0xa022000000000000, 0x0) 00:00:01 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x0, 0x1, {0x0, @usage=0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x500, @usage=0x2, 0x0, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 00:00:01 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x8cffffff, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:00:01 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x0, 0x1, {0x0, @usage=0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x500, @usage=0x2, 0x5, 0x0, [0x3, 0x8, 0x8]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 00:00:01 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) wait4(r0, 0x0, 0xfeffffff00000000, 0x0) 00:00:01 executing program 4: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x1, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) 00:00:01 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d4cac17", 0x6}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba868012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) [ 109.349442][ T5383] loop4: detected capacity change from 0 to 264192 [ 109.357788][ T5386] loop2: detected capacity change from 0 to 264192 [ 109.384079][ T5386] FAT-fs (loop2): bogus number of FAT sectors [ 109.390221][ T5386] FAT-fs (loop2): Can't find a valid FAT filesystem 00:00:01 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0xc0ed0000, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:00:01 executing program 5: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) [ 109.414434][ T5383] FAT-fs (loop4): bogus number of FAT sectors [ 109.420535][ T5383] FAT-fs (loop4): Can't find a valid FAT filesystem 00:00:01 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0xf6ffffff, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:00:01 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x0, 0x1, {0x0, @usage=0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x500, @usage=0x2, 0x5, 0x0, [0x3, 0x8, 0x8]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 109.490390][ T5397] FAT-fs (loop5): bogus number of reserved sectors [ 109.497000][ T5397] FAT-fs (loop5): Can't find a valid FAT filesystem 00:00:01 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0xfeffffff, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:00:01 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x0, 0x1, {0x0, @usage=0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x500, @usage=0x2, 0x5, 0x0, [0x3, 0x8, 0x0, 0x2]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 00:00:01 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) wait4(r0, 0x0, 0xffffff7f00000000, 0x0) 00:00:01 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0xffff0000, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:00:01 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0xffffff8c, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:00:02 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x0, 0x1, {0x0, @usage=0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x500, @usage=0x2, 0x5, 0x0, [0x3, 0x0, 0x0, 0x2]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 00:00:02 executing program 4: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x1, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba868012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) 00:00:02 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x1, &(0x7f0000000240)=[{&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) 00:00:02 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0xfffffff6, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 110.223166][ T5432] loop2: detected capacity change from 0 to 264192 [ 110.232922][ T5433] loop4: detected capacity change from 0 to 264192 [ 110.240187][ T5432] FAT-fs (loop2): bogus number of reserved sectors [ 110.246766][ T5432] FAT-fs (loop2): Can't find a valid FAT filesystem [ 110.255487][ T5433] FAT-fs (loop4): bogus number of FAT sectors [ 110.261565][ T5433] FAT-fs (loop4): Can't find a valid FAT filesystem 00:00:02 executing program 5: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d", 0x3, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) 00:00:02 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) wait4(r0, 0x0, 0xffffffff00000000, 0x0) 00:00:02 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x0, 0x1, {0x0, @usage=0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x500, @usage=0x2, 0x5, 0x0, [0x3, 0x0, 0x0, 0x2]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 00:00:02 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0xfffffffe, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:00:02 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x8000000000, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 110.393989][ T5446] loop5: detected capacity change from 0 to 264192 [ 110.417131][ T5446] FAT-fs (loop5): bogus number of FAT sectors [ 110.423269][ T5446] FAT-fs (loop5): Can't find a valid FAT filesystem 00:00:02 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x0, 0x1, {0x0, @usage=0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x500, @usage=0x2, 0x5, 0x0, [0x0, 0x0, 0x0, 0x2]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 00:00:02 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0xedc000000000, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:00:02 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x1000000000000, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:00:02 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) wait4(r0, 0x0, 0xffffffffffffffff, 0x0) 00:00:03 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x100000000000000, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:00:03 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x0, 0x1, {0x0, @usage=0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x500, @usage=0x2, 0x5, 0x0, [0x0, 0x0, 0x0, 0x2]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 00:00:03 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) tkill(r0, 0x2a) ptrace$setregs(0xf, r0, 0x1, &(0x7f0000000040)="710f74fdf525ba5b076a7d805565d9159b1d68c25416f5c93276a73208a9902da68e3862c57760059a4eecba178d4ac89a2f0e2782e139d844699eca604be995f359a5c30542ed90b59aaeb311e82e4fe033dcd1906c9baf8bd3cbca395ccc019379b33334744ce0890321c6e406823b2f5aeb9caa5fce78d919510a7e6a4ecccb81a73ca551b68783485c5f70b8e731e39c74ce6e56db8bde63406de783902c68444840c4b59bb8238cf1ea3a749f51899d7065bae316bbe851ceff11085b32edca971b6b95378a7c582141f9c6") ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) wait4(r0, 0x0, 0x0, 0x0) 00:00:03 executing program 5: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d", 0x3, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) 00:00:03 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x1, &(0x7f0000000240)=[{&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) 00:00:03 executing program 4: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x1, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) 00:00:03 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x200000000000000, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:00:03 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x0, 0x1, {0x0, @usage=0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x500, @usage=0x2, 0x5, 0x0, [0x0, 0x0, 0x0, 0x2]}, {0x0, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 00:00:03 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = getpid() sched_getscheduler(r1) tkill(r0, 0x37) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) ptrace$peeksig(0x4209, r2, &(0x7f0000000100)={0x1ff, 0x1, 0xa}, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]) tkill(0x0, 0xfffffffe) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r4 = getpid() sched_getscheduler(r4) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000080)=r4) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) wait4(r0, 0x0, 0x0, 0x0) 00:00:03 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x300000000000000, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:00:03 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x0, 0x1, {0x0, @usage=0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x500, @usage=0x2, 0x5, 0x0, [0x0, 0x0, 0x0, 0x2]}, {0x0, @usage, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 111.275359][ T5485] loop2: detected capacity change from 0 to 264192 [ 111.299389][ T5491] loop4: detected capacity change from 0 to 264192 [ 111.306096][ T5485] FAT-fs (loop2): bogus number of reserved sectors [ 111.312616][ T5485] FAT-fs (loop2): Can't find a valid FAT filesystem 00:00:03 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x700000000000000, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 111.362916][ T5499] loop5: detected capacity change from 0 to 264192 [ 111.363723][ T5491] FAT-fs (loop4): bogus number of FAT sectors [ 111.375563][ T5491] FAT-fs (loop4): Can't find a valid FAT filesystem [ 111.383373][ T5499] FAT-fs (loop5): bogus number of FAT sectors [ 111.389571][ T5499] FAT-fs (loop5): Can't find a valid FAT filesystem 00:00:03 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)=0x0) r3 = getpid() sched_getscheduler(r3) r4 = getpid() fcntl$getownex(r1, 0x10, &(0x7f0000000200)={0x0, 0x0}) r6 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000280)='.pending_reads\x00', 0x202602, 0xa8) clone3(&(0x7f00000002c0)={0x240060580, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)=0x0, {0x29}, &(0x7f0000000100)=""/125, 0x7d, &(0x7f0000000180)=""/36, &(0x7f0000000240)=[r2, r3, r0, r4, 0x0, r5, r0], 0x7, {r6}}, 0x58) tkill(r0, 0x17) tkill(r0, 0x2a) sched_getscheduler(r0) ptrace$cont(0x9, r7, 0x701f4331, 0x7fffffff) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) wait4(r0, 0x0, 0x0, 0x0) 00:00:03 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0xa00000000000000, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:00:03 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x0, 0x1, {0x0, @usage=0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x500, @usage=0x2, 0x5, 0x0, [0x0, 0x0, 0x0, 0x2]}, {0x0, @usage, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 00:00:04 executing program 5: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d", 0x3, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) 00:00:04 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0xfffffffffffffff, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:00:04 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x0, 0x1, {0x0, @usage=0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x500, @usage=0x2, 0x5, 0x0, [0x0, 0x0, 0x0, 0x2]}, {0x0, @usage, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 00:00:04 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) r1 = getpid() sched_getscheduler(r1) process_vm_writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/123, 0x7b}], 0x1, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/223, 0xdf}, {&(0x7f0000000200)=""/186, 0xba}], 0x2, 0x0) ptrace$setregs(0xd, r0, 0xfc70, &(0x7f0000000300)="76dc158e317277d7fc5c028c810be1bece8b9b1b10f9a92f198ae295e7aa7e42058c8c8fd6e74b0333e86b6989afef9eeeffe899895e7daf733152a7803a9cac") tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) wait4(r0, 0x0, 0x0, 0x0) 00:00:04 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x1, &(0x7f0000000240)=[{&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) 00:00:04 executing program 4: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {0x0, 0x0, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) 00:00:04 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x1000000000000000, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 112.251636][ T5529] loop2: detected capacity change from 0 to 264192 [ 112.258499][ T5531] loop4: detected capacity change from 0 to 264192 [ 112.290343][ T5537] loop5: detected capacity change from 0 to 264192 [ 112.300755][ T5529] FAT-fs (loop2): bogus number of reserved sectors [ 112.307398][ T5529] FAT-fs (loop2): Can't find a valid FAT filesystem [ 112.325917][ T5537] FAT-fs (loop5): bogus number of FAT sectors [ 112.332018][ T5537] FAT-fs (loop5): Can't find a valid FAT filesystem [ 112.340406][ T5531] FAT-fs (loop4): bogus number of FAT sectors 00:00:04 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x2010000000000000, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:00:04 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x0, 0x1, {0x0, @usage=0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x500, @usage=0x2, 0x5, 0x0, [0x0, 0x0, 0x0, 0x2]}, {0x0, @usage=0xfff, 0x0, 0x0, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 112.346577][ T5531] FAT-fs (loop4): Can't find a valid FAT filesystem 00:00:04 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x2200000000000000, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:00:04 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x0, 0x1, {0x0, @usage=0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x500, @usage=0x2, 0x5, 0x0, [0x0, 0x0, 0x0, 0x2]}, {0x0, @usage=0xfff, 0x0, 0x0, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 00:00:04 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) wait4(r0, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r2, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000040)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000440)={0x0, 0xc, {0x8001, @struct={0x3, 0x3}, r3, 0x9, 0x6, 0x0, 0x7, 0x7, 0x12, @struct={0x3ff, 0x7}, 0x7fffffff, 0x401, [0x1, 0x137, 0xeb, 0x9, 0x800, 0x2]}, {0x0, @usage=0x2, 0x0, 0x3f, 0x8, 0x7fff, 0x5, 0x1, 0x0, @struct={0x2, 0x4}, 0x8000, 0x4, [0x0, 0x905, 0x10001, 0x1f, 0xffffffffffffff11, 0x1f]}, {0x7ff, @struct={0x4, 0x8}, 0x0, 0x87, 0xeb, 0x255a, 0x8000, 0x100, 0x68, @struct={0x5, 0x220}, 0x10000, 0x9, [0x20, 0x7, 0x1, 0x24, 0x100000001, 0x4]}, {0xff, 0x3, 0x6}}) 00:00:05 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x0, 0x1, {0x0, @usage=0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x500, @usage=0x2, 0x5, 0x0, [0x3, 0x0, 0x0, 0x2]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 00:00:05 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x8000000000000000, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:00:05 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x0, 0x1, {0x0, @usage=0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x500, @usage=0x2, 0x5, 0x0, [0x0, 0x0, 0x0, 0x2]}, {0x0, @usage=0xfff, 0x0, 0x0, 0x0, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 00:00:05 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) wait4(r0, &(0x7f0000000040), 0x2, &(0x7f0000000080)) r2 = dup2(r1, r1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000140)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001240)={{r1}, r3, 0x0, @inherit={0x88, &(0x7f0000000340)={0x1, 0x8, 0x7, 0x40, {0x31, 0x2, 0xffffffff7fffffff, 0x0, 0x4}, [0x3, 0x3ff, 0x1ff, 0x9, 0x3, 0x44, 0x0, 0xb3f1]}}, @name="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"}) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) wait4(r0, 0x0, 0x0, 0x0) 00:00:05 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) 00:00:05 executing program 4: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {0x0, 0x0, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) 00:00:05 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x8cffffff00000000, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 113.178918][ T5576] loop4: detected capacity change from 0 to 264192 [ 113.184371][ T5577] loop2: detected capacity change from 0 to 264192 [ 113.201406][ T5577] FAT-fs (loop2): bogus number of reserved sectors [ 113.205555][ T5576] FAT-fs (loop4): bogus number of FAT sectors [ 113.207989][ T5577] FAT-fs (loop2): Can't find a valid FAT filesystem [ 113.214011][ T5576] FAT-fs (loop4): Can't find a valid FAT filesystem 00:00:05 executing program 5: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d", 0x3, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) 00:00:05 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x0, 0x1, {0x0, @usage=0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x500, @usage=0x2, 0x5, 0x0, [0x0, 0x0, 0x0, 0x2]}, {0x0, @usage=0xfff, 0x0, 0x0, 0x0, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 00:00:05 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0xf6ffffff00000000, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 113.320250][ T5593] loop5: detected capacity change from 0 to 264192 00:00:05 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) wait4(r0, 0x0, 0x0, 0x0) ptrace$cont(0x9, r0, 0xffffffff, 0xffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x101) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f00000002c0)={0x0, 0xee, 0x5}) ptrace$cont(0x9, r1, 0x9, 0x1200) r3 = getpgid(r0) r4 = gettid() r5 = getpid() sched_getscheduler(r5) r6 = getpgrp(r0) clone3(&(0x7f0000000200)={0x10000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0xb}, &(0x7f0000000140)=""/46, 0x2e, &(0x7f0000000180)=""/51, &(0x7f00000001c0)=[r4, r5, r6], 0x3}, 0x58) tgkill(r1, r3, 0x3e) [ 113.362973][ T5593] FAT-fs (loop5): bogus number of FAT sectors [ 113.369221][ T5593] FAT-fs (loop5): Can't find a valid FAT filesystem 00:00:05 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0xfeffffff00000000, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:00:05 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x0, 0x1, {0x0, @usage=0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x500, @usage=0x2, 0x5, 0x0, [0x0, 0x0, 0x0, 0x2]}, {0x0, @usage=0xfff, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 00:00:05 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0xffff000000000000, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:00:05 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) clone3(&(0x7f0000000340)={0x60002080, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0), {0x25}, &(0x7f0000000100)=""/235, 0xeb, &(0x7f0000000200)=""/214, &(0x7f0000000300)=[0x0, 0xffffffffffffffff, r0, r0], 0x4}, 0x58) tkill(r0, 0xaa) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) r3 = socket(0x10, 0x803, 0x0) write(r3, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r3, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) setsockopt$sock_int(r3, 0x1, 0x1, &(0x7f0000000400)=0x7, 0x4) sendto(r2, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) fcntl$setstatus(r2, 0x4, 0x6c00) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) wait4(r0, 0x0, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000003c0), 0x4c4000, 0x0) splice(r4, &(0x7f0000000440)=0x8, r1, &(0x7f0000000480)=0x9, 0xaec4, 0x2) 00:00:05 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x0, 0x1, {0x0, @usage=0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x500, @usage=0x2, 0x5, 0x0, [0x0, 0x0, 0x0, 0x2]}, {0x0, @usage=0xfff, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 00:00:06 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) 00:00:06 executing program 4: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {0x0, 0x0, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba868012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) 00:00:06 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0xffffffffffffff0f, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 114.069484][ T5627] loop2: detected capacity change from 0 to 264192 [ 114.079791][ T5629] loop4: detected capacity change from 0 to 264192 [ 114.133859][ T5627] FAT-fs (loop2): bogus number of reserved sectors [ 114.140395][ T5627] FAT-fs (loop2): Can't find a valid FAT filesystem [ 114.148108][ T5629] FAT-fs (loop4): bogus number of FAT sectors [ 114.154256][ T5629] FAT-fs (loop4): Can't find a valid FAT filesystem 00:00:06 executing program 5: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280), 0x0, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba868012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) 00:00:06 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x0, 0x1, {0x0, @usage=0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x500, @usage=0x2, 0x5, 0x0, [0x0, 0x0, 0x0, 0x2]}, {0x0, @usage=0xfff, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 00:00:06 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x22, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:00:06 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) wait4(r0, 0x0, 0x0, 0x0) pidfd_open(r0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8923, &(0x7f00000014c0)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x0e\xc3\xfa\xd1x}\xea\xe3\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f\xd2l9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05\x8e\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ\x00\x00\x00\x00\xec\xd9\xd9\xf0\xd5)\x815a\xcc{#\xc5\xfb\xc5m\xb1\x87f\xeb\xff\x02\x1e3\xdb\xbf\x82\x0f\f\xc9)\x99\x15\x85su]\x18\xde\xe6.\xc0J#ZI\xbb\xf3\xcf\xd7\x90\xe1l\xac\xad\xd5gy\xb9q<\xe0\'w\xca%\xf7\x7f5\xcc\x1a\xe1\xc7\xc0\xe1\x81\xa4\xa3\xca\xb3e\xb0\x18\x8c\xc3\x8flB\x0f\xd8Y.\xef\xbb\x18O\xc8$en\xc0\x1c\xa6,\a\xc3\xbb\xce\x8e{\xba.Y\xfcr\x8b\x01\xe8l_$x5)\x05\xbe\xeb8\xc7>\xaf\xf6*\xbb\xc4gE\xb2\x98\x9e]i8\x98k\xc6O\xdf\xb2\xedd$\x1f\xec\x01\xb8\x18\xb2uCh\x81\xbcKY \xad\xda\xc8\x10\xae\xdf\xbd\x9b\xfc\xf8\x8c\x1d\xce\xcb\xff\xee\xea\xcf?\xa0\xdeB@\xa8\xbd\x9a6\xc5U\ns\x93') sendmsg$NLBL_CIPSOV4_C_REMOVE(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000017c0)=ANY=[@ANYRES64, @ANYRES32, @ANYRESOCT, @ANYRES64=r3, @ANYRES32, @ANYRES64, @ANYRESHEX], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x40025) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{}, 0x0, 0x4, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r2}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000300)={{}, 0x0, 0xc, @unused=[0x1, 0x0, 0x1, 0x7], @devid=r2}) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000440)={r2, "fc728e32cad97b1304edf3ad20361a2d"}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r2, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, r2, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={r2, 0x8, 0x1, [0x7f, 0x628f, 0x10001, 0x1, 0x2], [0x4, 0x81, 0x7, 0xfffffffffffffffe, 0x1, 0x4fc6, 0x7, 0x7ff, 0x1, 0x7, 0x7, 0x5, 0x6d5d202d, 0x9, 0x80000001, 0x4, 0x8, 0x5, 0x10100000, 0xfa, 0x20, 0x4, 0x81, 0x69ab, 0x401, 0x3, 0x7, 0x43, 0xffffffff, 0xb14, 0x8, 0x1000000000, 0x4, 0x3, 0x3ff, 0x8, 0x5, 0x4, 0x8, 0xe2, 0x1000, 0x9, 0x4, 0x9, 0x5, 0x8, 0x6, 0x6, 0xe3, 0x6, 0x163451fd, 0xe0, 0x2, 0x2, 0xfffffffffffffff8, 0x8, 0x10000, 0x4, 0x3, 0x2, 0x2, 0x40, 0x8, 0xfffffffffffff8f1, 0x5, 0xeda, 0x10000, 0x4, 0x10001, 0x9, 0x2, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0x5, 0x80, 0x8e2, 0x80000000, 0x1, 0x5, 0x6, 0x7, 0x7, 0x6, 0x4, 0x9, 0x2, 0xb37, 0x159, 0x1000, 0x1, 0x10000, 0x800, 0xb56, 0x7ff, 0xdb, 0x0, 0x10000, 0xfffffffffffffffb, 0x8, 0x1000, 0x8, 0x7, 0x4, 0x3, 0x5, 0x2, 0x7fffffff, 0x8, 0x4, 0x2, 0x7, 0x5, 0xffffffff, 0x7, 0x7, 0x100000001, 0x1000000009, 0x3, 0x7]}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000004c0)={0x7, 0x1, {0x101, @usage=0x5, 0x0, 0x3, 0xb2e, 0x4, 0x85c7, 0x6, 0x0, @usage, 0x1ff, 0x3, [0x1, 0x4, 0x1, 0xb9, 0x1f, 0x5]}, {0x6, @usage=0x7, r2, 0x4, 0x3, 0x6, 0x3, 0x1, 0x494, @struct={0x3, 0x8f}, 0x97c, 0x6, [0x1ff, 0xfffffffffffffbff, 0x9bc4, 0x401, 0x8, 0x4]}, {0x1f, @usage=0x7f, 0x0, 0xfffffffffffffffc, 0x0, 0x180000000000, 0x4, 0x2, 0x10, @struct={0x6, 0x60fb}, 0x80000000, 0x101, [0x7fffffff, 0x4, 0x800, 0x12f2, 0x3ff, 0x800]}, {0x401, 0x2}}) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000000040)={0x0, "ae43f4e33b6a02b96266c19fd8faa663"}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000001240)={0x4, 0x2, {0x9506, @struct={0xcc38, 0x3}, 0x0, 0x29, 0x5, 0x20, 0x0, 0x1, 0x440, @usage=0x3, 0xfff, 0x1, [0x0, 0x81, 0x20, 0x3, 0x80000000, 0x4]}, {0x4, @usage=0x4, r2, 0x8, 0x80000001, 0x146b, 0x100, 0x8, 0x5, @usage=0xe8, 0xffffffff, 0x4, [0x4, 0x7, 0xfffffffffffffffd, 0x10000, 0x2, 0x6]}, {0x8, @struct={0x7, 0x4}, r5, 0x0, 0x6, 0x1, 0x1, 0x1f, 0x18, @usage=0x8, 0xc4, 0x10000, [0x200, 0x3a53, 0xbc7f, 0x7, 0x3, 0x5]}, {0x0, 0x3, 0x9}}) [ 114.275408][ T5634] 9pnet: Insufficient options for proto=fd [ 114.315469][ T5640] 9pnet: Insufficient options for proto=fd [ 114.321702][ T5641] loop5: detected capacity change from 0 to 264192 00:00:06 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x2c, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:00:06 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x0, 0x1, {0x0, @usage=0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x500, @usage=0x2, 0x5, 0x0, [0x0, 0x0, 0x0, 0x2]}, {0x0, @usage=0xfff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 114.375915][ T5641] FAT-fs (loop5): bogus number of FAT sectors [ 114.382097][ T5641] FAT-fs (loop5): Can't find a valid FAT filesystem [ 114.436152][ T5648] 9pnet: Insufficient options for proto=fd [ 114.476760][ T5650] 9pnet: Insufficient options for proto=fd 00:00:06 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x22, {'wfdno', 0x3d, r1}}) 00:00:06 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) wait4(r0, 0x0, 0x0, 0x0) 00:00:06 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x0, 0x1, {0x0, @usage=0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x500, @usage=0x2, 0x5, 0x0, [0x0, 0x0, 0x0, 0x2]}, {0x0, @usage=0xfff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 114.567869][ T5662] 9pnet: Insufficient options for proto=fd [ 114.586743][ T5663] 9pnet: Insufficient options for proto=fd 00:00:07 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) 00:00:07 executing program 4: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280), 0x0, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba868012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) 00:00:07 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x22, r1}}) [ 114.934183][ T5673] 9pnet: Insufficient options for proto=fd [ 114.940286][ T5675] loop4: detected capacity change from 0 to 264192 [ 114.949728][ T5675] FAT-fs (loop4): bogus number of FAT sectors [ 114.953223][ T5677] 9pnet: Insufficient options for proto=fd [ 114.955922][ T5675] FAT-fs (loop4): Can't find a valid FAT filesystem [ 114.976309][ T5678] loop2: detected capacity change from 0 to 264192 [ 114.985037][ T5678] FAT-fs (loop2): bogus number of reserved sectors [ 114.991666][ T5678] FAT-fs (loop2): Can't find a valid FAT filesystem 00:00:07 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x0, 0x1, {0x0, @usage=0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x500, @usage=0x2, 0x5, 0x0, [0x0, 0x0, 0x0, 0x2]}, {0x0, @usage=0xfff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 00:00:07 executing program 1: r0 = clone3(&(0x7f00000000c0)={0x901c5400, &(0x7f0000000000), 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffc72) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) r1 = getpid() sched_getscheduler(r1) r2 = getpid() sched_getscheduler(r2) tkill(r2, 0x11) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) wait4(r0, 0x0, 0x0, 0x0) 00:00:07 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x2c, r1}}) 00:00:07 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x0, 0x1, {0x0, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 00:00:07 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x22}) 00:00:07 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = getpid() sched_getscheduler(r1) ptrace$setopts(0x4206, r1, 0x1, 0x0) tkill(r0, 0x17) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) r2 = gettid() ptrace$cont(0x18, r2, 0xd5b5, 0x5) wait4(r0, 0x0, 0x0, 0x0) [ 115.206992][ T5688] 9pnet: Insufficient options for proto=fd [ 115.221319][ T5690] 9pnet: Insufficient options for proto=fd 00:00:07 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x0, 0x1, {0x0, @usage=0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x500, @usage=0x2, 0x5, 0x0, [0x0, 0x0, 0x0, 0x2]}, {0x0, @usage=0xfff, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 115.292321][ T5698] 9pnet: Insufficient options for proto=fd [ 115.329464][ T5700] 9pnet: Insufficient options for proto=fd 00:00:07 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x0, 0x0, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0xfffffffffffffff8, 0x7, 0x1, 0x500, @usage=0x2, 0x5, 0x3, [0x3, 0x8, 0x8, 0x2, 0x9, 0x6]}, {0x1f, @usage=0xfff, 0x0, 0x9, 0xc48, 0x2, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 00:00:07 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:00:08 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)}, {&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) 00:00:08 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x2}}) 00:00:08 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x0, 0x1, {0x0, @usage=0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x500, @usage=0x2, 0x5, 0x0, [0x0, 0x0, 0x0, 0x2]}, {0x0, @usage=0xfff, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x20, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 00:00:08 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) tkill(r0, 0x2a) r1 = getpid() sched_getscheduler(r1) wait4(r1, 0x0, 0x8, &(0x7f0000000040)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) wait4(r0, 0x0, 0x0, 0x0) 00:00:08 executing program 5: r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) 00:00:08 executing program 4: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280), 0x0, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) 00:00:08 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x3}}) [ 115.822118][ T5724] loop4: detected capacity change from 0 to 264192 [ 115.830058][ T5725] loop2: detected capacity change from 0 to 264192 00:00:08 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x0, 0x1, {0x0, @usage=0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x500, @usage=0x2, 0x5, 0x0, [0x0, 0x0, 0x0, 0x2]}, {0x0, @usage=0xfff, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 00:00:08 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x7}}) [ 115.866357][ T5724] FAT-fs (loop4): bogus number of FAT sectors [ 115.872462][ T5724] FAT-fs (loop4): Can't find a valid FAT filesystem [ 115.949755][ T5725] FAT-fs (loop2): bogus number of reserved sectors [ 115.956309][ T5725] FAT-fs (loop2): Can't find a valid FAT filesystem 00:00:08 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0xa}}) 00:00:08 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x3521d3480, &(0x7f0000000040), 0x0, 0x0, {0x17}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2a) r1 = getpid() sched_getscheduler(r1) r2 = fcntl$getown(0xffffffffffffffff, 0x9) wait4(r2, 0x0, 0x1000000, &(0x7f0000000140)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) wait4(r0, 0x0, 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) 00:00:08 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x0, 0x1, {0x0, @usage=0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x500, @usage=0x2, 0x5, 0x0, [0x0, 0x0, 0x0, 0x2]}, {0x0, @usage=0xfff, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, @usage=0x9, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 116.076465][ T22] audit: type=1400 audit(1635206408.369:158): avc: denied { read } for pid=5748 comm="syz-executor.1" name="nvram" dev="devtmpfs" ino=97 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 116.099693][ T22] audit: type=1400 audit(1635206408.369:159): avc: denied { open } for pid=5748 comm="syz-executor.1" path="/dev/nvram" dev="devtmpfs" ino=97 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 00:00:08 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)}, {&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) 00:00:08 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {0xffffffff}, 0x0, 0x0, 0x0, 0x0, 0x32}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) wait4(r0, 0x0, 0x0, 0x0) 00:00:08 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x10}}) 00:00:08 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x0, 0x1, {0x0, @usage=0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x500, @usage=0x2, 0x5, 0x0, [0x0, 0x0, 0x0, 0x2]}, {0x0, @usage=0xfff, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, @usage, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 00:00:08 executing program 5: r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) 00:00:09 executing program 4: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280), 0x0, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba868012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) [ 116.713073][ T5762] loop2: detected capacity change from 0 to 264192 [ 116.725439][ T5762] FAT-fs (loop2): bogus number of reserved sectors [ 116.731963][ T5762] FAT-fs (loop2): Can't find a valid FAT filesystem 00:00:09 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x22}}) 00:00:09 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x39) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) wait4(r0, 0x0, 0x0, 0x0) 00:00:09 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="7472616e7300000000c00000001a4b", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) [ 116.764231][ T5770] loop4: detected capacity change from 0 to 264192 [ 116.797339][ T5770] FAT-fs (loop4): bogus number of FAT sectors [ 116.803548][ T5770] FAT-fs (loop4): Can't find a valid FAT filesystem 00:00:09 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000780), &(0x7f0000000800)=0x6e) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000008, 0x10, r1, 0x30dcd000) ioctl$int_out(r1, 0x2, &(0x7f0000000840)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/9, 0x9}, {&(0x7f0000000100)=""/92, 0x5c}, {&(0x7f0000000180)=""/136, 0x88}, {&(0x7f0000000240)=""/225, 0xe1}, {&(0x7f0000000340)=""/150, 0x96}, {&(0x7f0000000400)=""/72, 0x48}, {&(0x7f0000000480)=""/101, 0x65}], 0x7, &(0x7f0000000580)=ANY=[@ANYBLOB="1c000000000000000107008100000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x48}, 0x140) tkill(r0, 0x2a) recvmsg$unix(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000b80)=""/76, 0x4c}, {&(0x7f0000003240)=""/4096, 0x1000}], 0x2, &(0x7f0000000c40)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}, 0x40010000) ptrace$getenv(0x4201, r2, 0x4, &(0x7f0000000d40)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) wait4(r0, 0x0, 0x0, 0x0) ptrace$setregs(0xf, r0, 0x9, &(0x7f00000006c0)="178a7c6f468aa319ecabab55ee4ba57e966d0ca30e67fa5808f17c1e3b94331111482987a2e07b81855fc00383c40d5cb94a4cd1868f8796a301ebf01bc8dacb9cc32a75d8115836892892ffed22e0260af18b1cb472b27f844d9b740fec8a1bca6f9d2eb2e929a79411623b1f3374fcbf140469df806ff379984ea378cfcecae86588707ea2df85487b799243f7ca29da0954a60486f3ad7382dc342012f4") openat2$dir(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x400}, 0x18) 00:00:09 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x0, 0x1, {0x0, @usage=0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x500, @usage=0x2, 0x5, 0x0, [0x0, 0x0, 0x0, 0x2]}, {0x0, @usage=0xfff, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, @usage, 0x0, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 00:00:09 executing program 0: r0 = socket(0x10, 0x803, 0xaa) write(r0, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r0, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0xd0, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2e}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x40}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x68a6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xe488}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x80c4}, 0x20000811) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = socket(0x11, 0x3, 0x2) bind(r2, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) sendfile(r1, r2, &(0x7f0000000140)=0xf3, 0xffffffffffff50a4) r3 = socket(0x10, 0x803, 0x0) write(r3, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r3, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) r4 = pidfd_open(0xffffffffffffffff, 0x0) sendfile(r3, r4, &(0x7f0000000380)=0x7, 0x5) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2c77d9646e6f3d", @ANYRESHEX=r2, @ANYBLOB=',\x00']) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000340)={0x4, {0x1f, 0x7, 0x80, 0x3f, 0x400}}) [ 116.910842][ T5787] 9pnet: Insufficient options for proto=fd [ 116.921663][ T5790] 9pnet: Insufficient options for proto=fd [ 117.402092][ T5778] ================================================================== [ 117.410186][ T5778] BUG: KCSAN: data-race in dd_has_work / deadline_remove_request [ 117.417915][ T5778] [ 117.420233][ T5778] write to 0xffff88810271d678 of 8 bytes by task 5777 on cpu 1: [ 117.427845][ T5778] deadline_remove_request+0x58/0x180 [ 117.433292][ T5778] dd_dispatch_request+0x3dd/0x4d0 [ 117.438418][ T5778] blk_mq_do_dispatch_sched+0x1e4/0x640 [ 117.443948][ T5778] __blk_mq_sched_dispatch_requests+0x1eb/0x290 [ 117.450183][ T5778] blk_mq_sched_dispatch_requests+0x9f/0x110 [ 117.456257][ T5778] __blk_mq_run_hw_queue+0xbc/0x140 [ 117.461468][ T5778] __blk_mq_delay_run_hw_queue+0x163/0x2f0 [ 117.467279][ T5778] blk_mq_run_hw_queue+0x22c/0x250 [ 117.472416][ T5778] blk_mq_sched_insert_requests+0x12b/0x1f0 [ 117.478293][ T5778] blk_mq_flush_plug_list+0x302/0x3d0 [ 117.483665][ T5778] blk_flush_plug_list+0x235/0x260 [ 117.488773][ T5778] blk_finish_plug+0x44/0x60 [ 117.493356][ T5778] __iomap_dio_rw+0xca7/0x1010 [ 117.498122][ T5778] iomap_dio_rw+0x30/0x70 [ 117.502436][ T5778] ext4_file_read_iter+0x21a/0x290 [ 117.507596][ T5778] generic_file_splice_read+0x24f/0x330 [ 117.513139][ T5778] splice_direct_to_actor+0x2aa/0x650 [ 117.518506][ T5778] do_splice_direct+0x106/0x190 [ 117.523340][ T5778] do_sendfile+0x63e/0xbb0 [ 117.527765][ T5778] __x64_sys_sendfile64+0x102/0x140 [ 117.532981][ T5778] do_syscall_64+0x44/0xa0 [ 117.537399][ T5778] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 117.543293][ T5778] [ 117.545597][ T5778] read to 0xffff88810271d678 of 8 bytes by task 5778 on cpu 0: [ 117.553121][ T5778] dd_has_work+0x13b/0x250 [ 117.557557][ T5778] blk_mq_do_dispatch_sched+0x12a/0x640 [ 117.563100][ T5778] __blk_mq_sched_dispatch_requests+0x1eb/0x290 [ 117.569332][ T5778] blk_mq_sched_dispatch_requests+0x9f/0x110 [ 117.575304][ T5778] __blk_mq_run_hw_queue+0xbc/0x140 [ 117.580489][ T5778] __blk_mq_delay_run_hw_queue+0x163/0x2f0 [ 117.586293][ T5778] blk_mq_run_hw_queue+0x22c/0x250 [ 117.591401][ T5778] blk_mq_sched_insert_requests+0x12b/0x1f0 [ 117.597296][ T5778] blk_mq_flush_plug_list+0x302/0x3d0 [ 117.602677][ T5778] blk_flush_plug_list+0x235/0x260 [ 117.607794][ T5778] blk_finish_plug+0x44/0x60 [ 117.612385][ T5778] read_pages+0x2e9/0x540 [ 117.616978][ T5778] page_cache_ra_unbounded+0x3d2/0x430 [ 117.622441][ T5778] ondemand_readahead+0x58c/0x7c0 [ 117.627472][ T5778] page_cache_sync_ra+0xaf/0xe0 [ 117.632328][ T5778] filemap_read+0x3ad/0x1220 [ 117.636918][ T5778] generic_file_read_iter+0x75/0x2c0 [ 117.642211][ T5778] ext4_file_read_iter+0x1db/0x290 [ 117.647330][ T5778] generic_file_splice_read+0x24f/0x330 [ 117.652879][ T5778] splice_direct_to_actor+0x2aa/0x650 [ 117.658253][ T5778] do_splice_direct+0x106/0x190 [ 117.663102][ T5778] do_sendfile+0x63e/0xbb0 [ 117.667517][ T5778] __x64_sys_sendfile64+0x102/0x140 [ 117.672727][ T5778] do_syscall_64+0x44/0xa0 [ 117.677144][ T5778] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 117.683043][ T5778] [ 117.685360][ T5778] value changed: 0xffff8881029cf048 -> 0xffff88810271d670 [ 117.692458][ T5778] [ 117.694768][ T5778] Reported by Kernel Concurrency Sanitizer on: [ 117.700905][ T5778] CPU: 0 PID: 5778 Comm: syz-executor.2 Not tainted 5.15.0-rc6-syzkaller #0 [ 117.709571][ T5778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 117.719612][ T5778] ================================================================== [ 117.728459][ T22] audit: type=1400 audit(1635206410.019:160): avc: denied { read } for pid=363 comm="syslogd" name="log" dev="sda1" ino=1125 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 00:00:10 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)}, {&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba868012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) 00:00:10 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r2, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000000)) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:00:10 executing program 5: r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) 00:00:10 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = getpid() sched_getscheduler(r1) ptrace$setopts(0x4206, r1, 0x4000000000000006, 0x100007) tkill(r0, 0x17) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) wait4(r0, 0x0, 0x0, 0x0) 00:00:10 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x0, 0x1, {0x0, @usage=0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x500, @usage=0x2, 0x5, 0x0, [0x0, 0x0, 0x0, 0x2]}, {0x0, @usage=0xfff, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, @usage, 0x0, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 00:00:10 executing program 4: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d", 0x3, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) [ 117.744423][ T5778] syz-executor.2 (5778) used greatest stack depth: 10528 bytes left [ 117.793878][ T5802] loop4: detected capacity change from 0 to 264192 [ 117.811959][ T5807] loop2: detected capacity change from 0 to 264192 00:00:10 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e20, @rand_addr=0x64010100}}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 117.837990][ T5802] FAT-fs (loop4): bogus number of FAT sectors [ 117.844100][ T5802] FAT-fs (loop4): Can't find a valid FAT filesystem 00:00:10 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) wait4(r0, 0x0, 0x0, 0x0) r1 = gettid() ptrace$peek(0xffffffffffffffff, r1, &(0x7f0000000040)) 00:00:10 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f0000000000)={0x6, 0x80, 0xb8, 0x3f, 0x2, 0x3, 0x0, 0x3, 0x22, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x80, 0x1, @perf_config_ext={0x0, 0xb5}, 0x1000, 0x64b4db4c, 0x4, 0x6, 0x0, 0x9, 0x89c, 0x0, 0x10001, 0x0, 0x80000001}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x12) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x26, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x2, @remote, 0x9e9, 0x2}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0xa0342c, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r2, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'bond_slave_0\x00'}) splice(r0, &(0x7f0000000100)=0x8, r0, &(0x7f0000000140)=0x7fffffff, 0x6, 0x8) [ 117.919484][ T5807] FAT-fs (loop2): bogus number of reserved sectors [ 117.926047][ T5807] FAT-fs (loop2): Can't find a valid FAT filesystem 00:00:10 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x0, 0x1, {0x0, @usage=0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x500, @usage=0x2, 0x5, 0x0, [0x0, 0x0, 0x0, 0x2]}, {0x0, @usage=0xfff, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, @usage, 0x0, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 117.954524][ T22] audit: type=1400 audit(1635206410.249:161): avc: denied { create } for pid=5819 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 00:00:10 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x0, 0x1, {0x0, @usage=0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x500, @usage=0x2, 0x5, 0x0, [0x0, 0x0, 0x0, 0x2]}, {0x0, @usage=0xfff, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, @usage, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000, 0x3]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 00:00:10 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/sockstat6\x00') r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup2(r1, r0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000000)={'mangle\x00', 0x0, [], '\x00', 0x0, 0x6000000}, &(0x7f0000000180)=0x54) r2 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) ptrace$setopts(0x4206, r2, 0x4, 0x41) tkill(r2, 0x17) tkill(r2, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) wait4(r2, 0x0, 0x0, 0x0) 00:00:10 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x0, 0x1, {0x0, @usage=0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x500, @usage=0x2, 0x5, 0x0, [0x0, 0x0, 0x0, 0x2]}, {0x0, @usage=0xfff, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, @usage, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 00:00:10 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000000)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='gid_map\x00') r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup2(r3, r2) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000000)={'mangle\x00', 0x0, [], '\x00', 0x0, 0x6000000}, &(0x7f0000000180)=0x54) ioctl$KDSKBENT(r2, 0x4b47, &(0x7f0000000000)={0x6, 0xeb, 0x9}) r4 = socket(0x6, 0x3, 0x80) r5 = syz_open_pts(r0, 0x2000) dup(r5) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b1e030a900c0070000000a163ee340b7679500800000000a000101576aed0270b8bf3fa0935b9566fd792bbf0e5bf5ff00001c000100dd69903e7b108a9c0000000000000006ad8e5ecc326d3a09ffc2c6540000000000000000000000000000000024"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}}) 00:00:11 executing program 5: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)}, {&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba868012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) 00:00:11 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='gid_map\x00') dup2(0xffffffffffffffff, r2) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000000)={'mangle\x00', 0x0, [], '\x00', 0x0, 0x6000000}, &(0x7f0000000180)=0x54) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000069c0)={'mangle\x00', 0x0, [0x9, 0x0, 0xfffff919, 0x1, 0x5]}, &(0x7f0000000080)=0x54) tkill(r0, 0x17) recvmmsg$unix(r3, &(0x7f0000006680)=[{{&(0x7f0000000200), 0x6e, &(0x7f0000000600)=[{&(0x7f0000000280)=""/51, 0x33}, {&(0x7f00000002c0)=""/180, 0xb4}, {&(0x7f0000000380)=""/48, 0x30}, {&(0x7f00000003c0)=""/137, 0x89}, {&(0x7f0000000480)=""/64, 0x40}, {&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/197, 0xc5}, {&(0x7f00000005c0)=""/12, 0xc}], 0x8, &(0x7f0000000680)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa0}}, {{&(0x7f0000000740), 0x6e, &(0x7f0000000800)=[{&(0x7f00000007c0)=""/53, 0x35}], 0x1, &(0x7f0000000840)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f00000008c0), 0x6e, &(0x7f0000000940)=[{&(0x7f0000002240)=""/4096, 0x1000}], 0x1, &(0x7f0000006a40)=ANY=[@ANYBLOB="2c0000000000000001000014010000006655fa029af4c93666286af29f160d7edbc6901f5e6a39843870faacf7da10b0c9a0e91fbc8a093d06c5552f81323a0b358ce96b89d401000100000000009c7d72fb0196e1b813f1d83e904e4fed272dd167f1d784003d2fa4355c331cdf95740bb56eaf76b59f7a01a201000000268cee9f38b55f100f8d3cfb7058c694b64639ae5e0bd5269f0aa8765fb4c6bf226fe58afa499be1b6a17c0a4e41f9dd7181528164e136ca7662b9bc87a1efaa790aa5995790e9ad5f", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x148}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000b00)}, {&(0x7f0000000b40)=""/60, 0x3c}, {&(0x7f0000000b80)=""/39, 0x27}, {&(0x7f0000003240)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/104, 0x68}], 0x5, &(0x7f0000000cc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}, {{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000dc0)=""/243, 0xf3}, {&(0x7f0000000ec0)=""/25, 0x19}, {&(0x7f0000000f00)=""/49, 0x31}, {&(0x7f0000000f40)=""/179, 0xb3}, {&(0x7f0000001000)=""/61, 0x3d}, {&(0x7f0000004240)=""/4096, 0x1000}, {&(0x7f0000001040)=""/252, 0xfc}], 0x7, &(0x7f0000005240)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}, {{0x0, 0x0, &(0x7f0000006500)=[{&(0x7f0000005280)=""/226, 0xe2}, {&(0x7f0000005380)=""/229, 0xe5}, {&(0x7f0000005480)=""/37, 0x25}, {&(0x7f00000054c0)=""/31, 0x1f}, {&(0x7f0000005500)=""/4096, 0x1000}], 0x5, &(0x7f0000006580)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}], 0x6, 0x40010002, 0x0) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/slabinfo\x00', 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r4, 0x80083314, &(0x7f00000001c0)) r5 = socket(0x10, 0x803, 0x0) write(r5, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r5, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) read(r5, &(0x7f00000068c0)=""/253, 0xfd) wait4(r0, 0x0, 0x0, 0x0) wait4(r0, 0x0, 0x20000001, &(0x7f0000006800)) 00:00:11 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174", 0xb}, {&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) 00:00:11 executing program 4: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d", 0x3, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) [ 118.682284][ T22] audit: type=1400 audit(1635206410.969:162): avc: denied { create } for pid=5846 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 118.727361][ T5847] 9pnet: Insufficient options for proto=fd [ 118.740900][ T5853] loop4: detected capacity change from 0 to 264192 [ 118.754308][ T5853] FAT-fs (loop4): bogus number of FAT sectors [ 118.758465][ T5856] loop2: detected capacity change from 0 to 264192 [ 118.760402][ T5853] FAT-fs (loop4): Can't find a valid FAT filesystem 00:00:11 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x0, 0x1, {0x0, @usage=0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x500, @usage=0x2, 0x5, 0x0, [0x0, 0x0, 0x0, 0x2]}, {0x0, @usage=0xfff, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, @usage, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 118.786087][ T5858] loop5: detected capacity change from 0 to 264192 [ 118.793498][ T5856] FAT-fs (loop2): bogus number of reserved sectors [ 118.800057][ T5856] FAT-fs (loop2): Can't find a valid FAT filesystem [ 118.829356][ T5864] 9pnet: Insufficient options for proto=fd 00:00:11 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) r2 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000240)={@local, @ipv4={'\x00', '\xff\xff', @remote}, @dev, 0x0, 0x6, 0xb, 0x0, 0x0, 0x0, r5}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r5, 0x1, 0x6, @local}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 118.872736][ T5858] FAT-fs (loop5): bogus number of reserved sectors [ 118.879349][ T5858] FAT-fs (loop5): Can't find a valid FAT filesystem 00:00:11 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 00:00:11 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x0, 0x1, {0x0, @usage=0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x500, @usage=0x2, 0x5, 0x0, [0x0, 0x0, 0x0, 0x2]}, {0x0, @usage=0xfff, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, @usage, 0xa7, 0x0, [0x4ce3, 0x4, 0x80000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 00:00:11 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='gid_map\x00') r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup2(r2, r1) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000000)={'mangle\x00', 0x0, [], '\x00', 0x0, 0x6000000}, &(0x7f0000000180)=0x54) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000340)={0x3f, "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"}) r3 = socket(0x22, 0x2, 0x1) bind(r3, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) [ 118.988056][ T5877] 9pnet: Insufficient options for proto=fd [ 118.998056][ T5878] 9pnet: Insufficient options for proto=fd 00:00:11 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) wait4(r0, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x23, 0x1, 0x81) sendto(0xffffffffffffffff, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001b80)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f0000000700)={"97a43e5a96e326ef3661953bc153ac0c", r6, r5, {0x6, 0x2}, {0x80000000, 0x4}, 0x8, [0xfffffffffffffff8, 0x80000000, 0x0, 0x68e, 0xc10, 0xffffffffffffff01, 0x4, 0x81, 0x9, 0x5, 0x1f, 0x1, 0x4, 0x0, 0x7, 0x8]}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{r2}, r6, 0x4, @unused=[0x3, 0x0, 0xfffffffffffffff7, 0x7], @subvolid=0x1}) write(r1, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000480), &(0x7f00000004c0)=0xc) sendto(r1, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000040)={0x0, 0x7f, 0x0, [0x20, 0xff, 0x800000000000000, 0x7], [0x3b3, 0x20, 0x2, 0x1, 0xae64, 0x6, 0xfffffffffffffd1e, 0x7, 0x9, 0xffffffffffffffde, 0x5932120e, 0x8, 0x9, 0x9, 0x7fffffff, 0x32a4, 0x7fffffff, 0x800000000, 0x3, 0x8, 0x3, 0x8000, 0xfff, 0x9, 0xffffffffffffffff, 0x10000, 0xd0e7, 0x101, 0x1, 0xac, 0x8000, 0x2, 0x4, 0x7f, 0x101, 0x0, 0x4, 0xffffffff00000000, 0xfffffffffffffffa, 0x800, 0x3ff, 0x5, 0x1ff, 0x6, 0x4, 0x8c8, 0x3, 0x10000, 0x7fffffff, 0xffffffff, 0x7, 0x3ff, 0xfffffffffffffff9, 0x416, 0x1, 0x1, 0x8, 0x8001, 0x2, 0x9, 0xf5a, 0x59e3, 0x80800, 0x8, 0x159, 0x6, 0xffffffffffff0000, 0x7fffffff, 0x1e, 0x4000, 0x80, 0x1, 0x7, 0x5, 0x85bb, 0x3, 0x3, 0x9, 0x0, 0x3, 0x100000000, 0xff, 0x40000000000, 0x8a, 0xfffffffffffffff8, 0x8001, 0x0, 0x0, 0xffffffffffffff47, 0x3fc, 0x400, 0x0, 0x8, 0x206, 0x9, 0xe3c, 0x3580, 0x1, 0x10000, 0x4, 0x4665, 0x6, 0xa93, 0x1, 0x1, 0xa, 0x2, 0x100, 0x100, 0x1c, 0x10000, 0x6, 0x8, 0x400000000, 0x1, 0x1f40, 0x2, 0x3, 0x5, 0x2, 0x1f]}) 00:00:11 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x0, 0x1, {0x0, @usage=0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x500, @usage=0x2, 0x5, 0x0, [0x0, 0x0, 0x0, 0x2]}, {0x0, @usage=0xfff, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, @usage, 0xa7, 0x0, [0x4ce3, 0x4]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 00:00:11 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = socket(0x11, 0x3, 0x2) bind(r2, &(0x7f0000000180)=@phonet={0x23, 0x1, 0x20, 0x80}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x1080010, &(0x7f0000000340)=ANY=[@ANYRES16=r0, @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',\x00']) [ 119.087709][ T22] audit: type=1400 audit(1635206411.379:163): avc: denied { create } for pid=5882 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 119.114409][ T5883] 9pnet: Insufficient options for proto=fd [ 119.160276][ T22] audit: type=1400 audit(1635206411.449:164): avc: denied { create } for pid=5885 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 119.180877][ C0] sd 0:0:1:0: tag#7374 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 119.190731][ C0] sd 0:0:1:0: tag#7374 CDB: opcode=0xe5 (vendor) [ 119.197088][ C0] sd 0:0:1:0: tag#7374 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 119.206112][ C0] sd 0:0:1:0: tag#7374 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 119.215139][ C0] sd 0:0:1:0: tag#7374 CDB[20]: ba [ 119.251156][ C0] sd 0:0:1:0: tag#7406 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 119.260997][ C0] sd 0:0:1:0: tag#7406 CDB: opcode=0xe5 (vendor) [ 119.267350][ C0] sd 0:0:1:0: tag#7406 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 119.276406][ C0] sd 0:0:1:0: tag#7406 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 119.285467][ C0] sd 0:0:1:0: tag#7406 CDB[20]: ba 00:00:11 executing program 5: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)}, {&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) 00:00:11 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x0, 0x1, {0x0, @usage=0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x500, @usage=0x2, 0x5, 0x0, [0x0, 0x0, 0x0, 0x2]}, {0x0, @usage=0xfff, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, @usage, 0xa7, 0x0, [0x4ce3, 0x4]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 00:00:11 executing program 1: getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000002c0)={0x0, @multicast1}, &(0x7f0000000300)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="00000000000000000000f2ff00000000ca784efe196a7921241352c947b59e3173b0d478f3b79b14866920f715d1fddb21e07eb2ff350a655287c99a8526d9fc79e25878c53bc449c8156794e3c6a62b0516e961996f673cd9eb1deedafd4f15690cdd40b5963e8a37a62540775f32414f6e945ad7d9e73c83a0cc", @ANYRES32=0x0, @ANYBLOB="8000000100000000000000ff4ce4007000660000db2f907864010101ac1414aa44141f41ac14143500000001ac141428000000ff861000000000070668e83d160204ee54440c9061ac1414bb00000200891370ac141433ffffffffac1e0101ac1414aa010044040891861291c7e25e558076cc43acb282343e994f00"]}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x85a28247b4ee2684}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x6c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x4}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x4) r3 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x17) r4 = getpgid(r3) r5 = getpgid(r3) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180)=0x0) r7 = getpid() sched_getscheduler(r7) clone3(&(0x7f0000000200)={0x200, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x23}, &(0x7f0000000100)=""/17, 0x11, &(0x7f0000000140)=""/55, &(0x7f00000001c0)=[r3, r4, r5, r3, r6, 0x0, r3, r7, r3], 0x9}, 0x58) tkill(r3, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) wait4(r3, 0x0, 0x0, 0x0) 00:00:11 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000000)={0x8, 0x8}) r1 = socket(0x11, 0x3, 0x2) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000003fc0)=ANY=[@ANYBLOB="00000000231dfb26223b027e6ceb45b093dd68fd0c0f151a06bd2b223625b0b79bc1260c73cb1e586018ee000000", @ANYRES16=r2, @ANYBLOB="04002cbd7000ffdbdf250400000024000180060001000a000000060005004e2000000800060005000000050002000600000028000180050002000800000014000400fc00000000000000000000000000000008000300ac141441"], 0x60}, 0x1, 0x0, 0x0, 0x880}, 0x4010) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) connect$unix(r5, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000240)={@local, @ipv4={'\x00', '\xff\xff', @remote}, @dev, 0x0, 0x6, 0xb, 0x0, 0x0, 0x0, r6}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000005280)={'erspan0\x00', &(0x7f00000051c0)={'syztnl1\x00', 0x0, 0x7, 0x10, 0x1, 0xfe0, {{0x26, 0x4, 0x0, 0x27, 0x98, 0x64, 0x0, 0x0, 0x4, 0x0, @local, @private=0xa010100, {[@cipso={0x86, 0x5e, 0x1, [{0x1, 0x9, "f59b1442107570"}, {0x2, 0xd, "9f7c43c283cfcd32c3e923"}, {0x1, 0xd, "93fdc3ff360100095c7567"}, {0x7, 0x12, "9def21155b8c79b898dbe64b73d68c0d"}, {0x1, 0x2}, {0x1, 0x9, "e6fa1c535fa82a"}, {0x7, 0xd, "c6ac3bcea0a7e6b9c0005b"}, {0x0, 0x8, "73381a6d2b4b"}, {0x5, 0x3, 'Y'}]}, @ssrr={0x89, 0x23, 0x19, [@local, @remote, @multicast2, @remote, @multicast2, @multicast2, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000052c0)={'wg1\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000005940)={&(0x7f0000002f00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000005900)={&(0x7f0000005300)={0x5d4, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [{{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x68, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @user_linkup_enabled}]}}, {{0x8}, {0x234, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0xffffffffffffffba}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xb37f}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x26}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r6}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0xffffffffffffff5e, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0xa, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r7}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xd2}}, {0x8, 0x6, r8}}}]}}]}, 0x5d4}}, 0x40) clock_gettime(0x0, &(0x7f0000003dc0)={0x0, 0x0}) syz_open_pts(0xffffffffffffffff, 0x2a8840) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003b80)=[{{&(0x7f0000000680), 0x6e, &(0x7f0000000900)=[{&(0x7f0000000700)=""/240, 0xf0}, {&(0x7f0000000800)=""/230, 0xe6}], 0x2, &(0x7f0000000940)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000000980), 0x6e, &(0x7f0000000c40)=[{&(0x7f0000000a00)=""/179, 0xb3}, {&(0x7f0000000ac0)=""/95, 0x5f}, {&(0x7f0000000b40)=""/229, 0xe5}], 0x3, &(0x7f0000000c80)=[@cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}, {{&(0x7f0000000d00)=@abs, 0x6e, &(0x7f0000000ec0)=[{&(0x7f0000000d80)=""/173, 0xad}, {&(0x7f0000000e40)=""/105, 0x69}], 0x2, &(0x7f0000000f00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000000f40), 0x6e, &(0x7f0000002280)=[{&(0x7f0000000fc0)=""/121, 0x79}, {&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f0000002040)=""/92, 0x5c}, {&(0x7f00000020c0)=""/203, 0xcb}, {&(0x7f00000021c0)=""/152, 0x98}], 0x5, &(0x7f0000002300)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{&(0x7f0000002440), 0x6e, &(0x7f0000002a00)=[{&(0x7f00000024c0)=""/105, 0x69}, {&(0x7f0000002540)=""/178, 0xb2}, {&(0x7f0000002600)=""/225, 0xe1}, {&(0x7f0000002700)=""/197, 0xc5}, {&(0x7f0000002800)=""/24, 0x18}, {&(0x7f0000002840)=""/233, 0xe9}, {&(0x7f0000002940)=""/138, 0x8a}], 0x7}}, {{&(0x7f0000002a80), 0x6e, &(0x7f0000002c40)=[{&(0x7f0000002b00)=""/115, 0x73}, {&(0x7f0000002b80)=""/146, 0x92}], 0x2, &(0x7f0000002c80)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}, {{&(0x7f0000002cc0)=@abs, 0x6e, &(0x7f0000003180)=[{&(0x7f0000002d40)=""/184, 0xb8}, {&(0x7f0000002e00)=""/93, 0x5d}, {&(0x7f0000002e80)=""/33, 0x21}, {&(0x7f0000003ec0)=""/245, 0xf5}, {&(0x7f0000002fc0)=""/198, 0xc6}, {&(0x7f0000003e40)=""/68, 0x44}, {&(0x7f0000003140)=""/40, 0x28}], 0x7}}, {{0x0, 0x0, &(0x7f0000003700)=[{&(0x7f0000003200)=""/15, 0xf}, {&(0x7f0000003240)}, {&(0x7f0000003280)=""/63, 0x3f}, {&(0x7f00000032c0)=""/65, 0x41}, {&(0x7f0000003340)=""/15, 0xf}, {&(0x7f0000003380)=""/100, 0x64}, {&(0x7f0000003400)=""/225, 0xe1}, {&(0x7f0000003500)=""/222, 0xde}, {&(0x7f0000003600)=""/215, 0xd7}], 0x9, &(0x7f00000037c0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}}, {{0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f0000002ec0)=""/11, 0xb}, {&(0x7f0000003900)=""/199, 0xc7}], 0x2, &(0x7f0000004080)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="38000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000005000000000000000100e8ff02000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x118}}], 0x9, 0x40002000, &(0x7f0000003e00)={r9, r10+10000000}) recvmsg(r3, &(0x7f0000000640)={&(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/9, 0x9}, {&(0x7f0000000340)=""/20, 0x14}, {&(0x7f0000000380)=""/129, 0x81}, {&(0x7f0000000440)=""/100, 0x64}, {&(0x7f00000004c0)=""/228, 0xe4}], 0x5}, 0x40000000) 00:00:11 executing program 4: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d", 0x3, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) 00:00:11 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174", 0xb}, {&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) [ 119.649788][ T5909] loop4: detected capacity change from 0 to 264192 [ 119.655345][ T5912] loop2: detected capacity change from 0 to 264192 [ 119.656917][ T22] audit: type=1400 audit(1635206411.949:165): avc: denied { ioctl } for pid=5904 comm="syz-executor.0" path="socket:[25974]" dev="sockfs" ino=25974 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 119.689913][ T5915] loop5: detected capacity change from 0 to 264192 [ 119.698667][ T5909] FAT-fs (loop4): bogus number of FAT sectors [ 119.704798][ T5909] FAT-fs (loop4): Can't find a valid FAT filesystem [ 119.709394][ T5912] FAT-fs (loop2): bogus number of reserved sectors [ 119.718020][ T5912] FAT-fs (loop2): Can't find a valid FAT filesystem [ 119.724731][ T5915] FAT-fs (loop5): bogus number of reserved sectors [ 119.731279][ T5915] FAT-fs (loop5): Can't find a valid FAT filesystem 00:00:12 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x0, 0x1, {0x0, @usage=0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x500, @usage=0x2, 0x5, 0x0, [0x0, 0x0, 0x0, 0x2]}, {0x0, @usage=0xfff, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, @usage, 0xa7, 0x0, [0x4ce3, 0x4]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 00:00:12 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000200)={{{@in=@multicast2, @in=@empty}}, {{@in6=@dev}}}, &(0x7f0000000000)=0xe8) r2 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r3) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x800080, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@hash}, {@uid_eq={'uid', 0x3d, 0xee00}}, {@dont_appraise}, {@uid_lt={'uid<', r3}}, {@seclabel}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}]}}) 00:00:12 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat6\x00') r1 = socket(0x11, 0x3, 0x2) r2 = socket$inet6(0xa, 0x4, 0x7) getsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040), &(0x7f0000000100)=0x4) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = syz_io_uring_complete(0x0) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000000200)={0x8, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}]}) 00:00:12 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) tkill(r0, 0x30) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) wait4(r0, 0x0, 0x0, 0x0) 00:00:12 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x0, 0x1, {0x0, @usage=0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x500, @usage=0x2, 0x5, 0x0, [0x0, 0x0, 0x0, 0x2]}, {0x0, @usage=0xfff, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, @usage, 0xa7, 0x0, [0x4ce3, 0x0, 0x80000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 00:00:12 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r0 = socket(0x11, 0x3, 0x2) bind(r0, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) 00:00:12 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) r1 = gettid() wait4(r1, &(0x7f0000000080), 0x0, 0x0) tkill(r0, 0x2a) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) wait4(r0, &(0x7f0000000100), 0x2, 0x0) (fail_nth: 1) 00:00:12 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = socket(0x11, 0x3, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000003c0)={0x0, ""/256, 0x0, 0x0}) r4 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000600)={r3, r6, "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", "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"}) bind(r2, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="000000000000007b73fb55d5ad71ac5b4bdc6b5610356c2b976b601f406a5a81477132267cea6e578c6473eacb9477f93d8e7a0942980c685dea0c940bed2ffc2bfc32197e84", @ANYRESHEX=r2, @ANYBLOB=',\x00']) r7 = socket(0x10, 0x803, 0x0) bind(r7, &(0x7f0000000340)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x80) write(r7, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r7, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) read(r7, &(0x7f0000000200)=""/198, 0xc6) 00:00:12 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x0, 0x1, {0x0, @usage=0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x500, @usage=0x2, 0x5, 0x0, [0x0, 0x0, 0x0, 0x2]}, {0x0, @usage=0xfff, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, @usage, 0xa7, 0x0, [0x0, 0x0, 0x80000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 00:00:12 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x25a165f00, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) wait4(r0, 0x0, 0x0, 0x0) 00:00:12 executing program 4: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d4cac", 0x5, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) 00:00:12 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174", 0xb}, {&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) [ 120.591437][ T5958] loop2: detected capacity change from 0 to 264192 [ 120.602858][ T5964] loop4: detected capacity change from 0 to 264192 [ 120.610997][ C0] sd 0:0:1:0: tag#7393 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 120.619087][ T5962] FAULT_INJECTION: forcing a failure. [ 120.619087][ T5962] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 120.620844][ C0] sd 0:0:1:0: tag#7393 CDB: opcode=0xe5 (vendor) [ 120.633940][ T5962] CPU: 1 PID: 5962 Comm: syz-executor.5 Not tainted 5.15.0-rc6-syzkaller #0 [ 120.640267][ C0] sd 0:0:1:0: tag#7393 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 120.648873][ T5962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 120.648885][ T5962] Call Trace: [ 120.648891][ T5962] dump_stack_lvl+0xd6/0x122 [ 120.658200][ C0] sd 0:0:1:0: tag#7393 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 120.668196][ T5962] dump_stack+0x11/0x1b [ 120.668215][ T5962] should_fail+0x23c/0x250 [ 120.671490][ C0] sd 0:0:1:0: tag#7393 CDB[20]: ba [ 120.676045][ T5962] should_fail_usercopy+0x16/0x20 [ 120.703719][ T5962] _copy_to_user+0x1c/0x90 [ 120.708200][ T5962] simple_read_from_buffer+0xab/0x120 [ 120.713566][ T5962] proc_fail_nth_read+0x10d/0x150 [ 120.718647][ T5962] ? proc_fault_inject_write+0x230/0x230 [ 120.724305][ T5962] vfs_read+0x1e6/0x750 [ 120.728562][ T5962] ? __fget_light+0x21b/0x260 [ 120.733231][ T5962] ? __cond_resched+0x11/0x40 [ 120.737894][ T5962] ksys_read+0xd9/0x190 [ 120.742099][ T5962] __x64_sys_read+0x3e/0x50 [ 120.746588][ T5962] do_syscall_64+0x44/0xa0 [ 120.751015][ T5962] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 120.756966][ T5962] RIP: 0033:0x7f2cf92ca5ec [ 120.761364][ T5962] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 120.781023][ T5962] RSP: 002b:00007f2cf708e170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 00:00:13 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) r1 = gettid() wait4(r1, &(0x7f0000000080), 0x0, 0x0) tkill(r0, 0x2a) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) wait4(r0, &(0x7f0000000100), 0x2, 0x0) 00:00:13 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000380)=0x0) ptrace$setopts(0x4206, r2, 0x0, 0x30) tkill(r0, 0x17) tkill(r0, 0x2a) sched_getscheduler(0x0) r3 = dup3(r1, r1, 0x0) clone3(&(0x7f00000005c0)={0x40, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440), {0x2c}, &(0x7f0000000480)=""/212, 0xd4, &(0x7f0000001240)=""/4096, &(0x7f0000000580)=[r2, 0x0], 0x2, {r3}}, 0x58) r4 = fork() r5 = getpid() sched_getscheduler(r5) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000280)=0x0) r7 = getpid() sched_getscheduler(r7) clone3(&(0x7f0000000300)={0x1040f00, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000180)=""/48, 0x30, &(0x7f00000001c0)=""/148, &(0x7f00000002c0)=[r4, r5, 0x0, r0, r6, r7, r0], 0x7}, 0x58) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) wait4(r0, 0x0, 0x0, 0x0) r8 = getpid() sched_getscheduler(r8) ptrace$getsig(0x4202, r8, 0x5, &(0x7f0000000040)) [ 120.789432][ T5962] RAX: ffffffffffffffda RBX: 00000000000001bf RCX: 00007f2cf92ca5ec [ 120.797388][ T5962] RDX: 000000000000000f RSI: 00007f2cf708e1e0 RDI: 0000000000000004 [ 120.805412][ T5962] RBP: 00007f2cf708e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 120.813410][ T5962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.821361][ T5962] R13: 00007fff534a463f R14: 00007f2cf708e300 R15: 0000000000022000 [ 120.829575][ T5970] 9pnet: Insufficient options for proto=fd 00:00:13 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x0, 0x1, {0x0, @usage=0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x500, @usage=0x2, 0x5, 0x0, [0x0, 0x0, 0x0, 0x2]}, {0x0, @usage=0xfff, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, @usage, 0xa7, 0x0, [0x0, 0x0, 0x80000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 00:00:13 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) r1 = gettid() wait4(r1, &(0x7f0000000080), 0x0, 0x0) tkill(r0, 0x2a) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) wait4(r0, &(0x7f0000000100), 0xffffffffffffffff, 0x0) [ 120.915236][ T5967] 9pnet: Insufficient options for proto=fd [ 120.953956][ C0] sd 0:0:1:0: tag#7406 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s 00:00:13 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x4, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='5\x00'/15, @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) [ 120.963802][ C0] sd 0:0:1:0: tag#7406 CDB: opcode=0xe5 (vendor) [ 120.970148][ C0] sd 0:0:1:0: tag#7406 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 120.975954][ T5958] FAT-fs (loop2): bogus number of reserved sectors [ 120.979177][ C0] sd 0:0:1:0: tag#7406 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 120.979198][ C0] sd 0:0:1:0: tag#7406 CDB[20]: ba [ 120.985687][ T5958] FAT-fs (loop2): Can't find a valid FAT filesystem 00:00:13 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x0, 0x1, {0x0, @usage=0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x500, @usage=0x2, 0x5, 0x0, [0x0, 0x0, 0x0, 0x2]}, {0x0, @usage=0xfff, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, @usage, 0xa7, 0x0, [0x0, 0x0, 0x80000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) [ 121.015053][ T5964] FAT-fs (loop4): bogus number of FAT sectors [ 121.021173][ T5964] FAT-fs (loop4): Can't find a valid FAT filesystem 00:00:13 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x3, 'ip6tnl0\x00', {0x5}, 0x7}) r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:00:13 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x0, 0x1, {0x0, @usage=0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x500, @usage=0x2, 0x5, 0x0, [0x0, 0x0, 0x0, 0x2]}, {0x0, @usage=0xfff, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, @usage, 0xa7, 0x0, [0x4ce3, 0x0, 0x80000000]}, {0x0, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 00:00:13 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r2 = gettid() timer_create(0x6, &(0x7f0000000100)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000000500)=0x0) timer_settime(r3, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x17) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000017c0)=[{{&(0x7f0000000480), 0x6e, &(0x7f0000000840)=[{&(0x7f0000000540)=""/109, 0x6d}, {&(0x7f00000005c0)=""/212, 0xd4}, {&(0x7f00000006c0)}, {&(0x7f0000000700)=""/45, 0x2d}, {&(0x7f0000000740)=""/255, 0xff}], 0x5, &(0x7f00000008c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}, {{&(0x7f00000009c0), 0x6e, &(0x7f0000000c40)=[{&(0x7f0000000a40)=""/223, 0xdf}, {&(0x7f0000000b40)=""/85, 0x55}, {&(0x7f0000000bc0)=""/115, 0x73}], 0x3, &(0x7f0000000c80)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}}, {{&(0x7f0000000d80)=@abs, 0x6e, &(0x7f0000000f40)=[{&(0x7f0000000e00)=""/184, 0xb8}, {&(0x7f0000000ec0)=""/121, 0x79}], 0x2, &(0x7f0000000f80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000000fc0), 0x6e, &(0x7f0000001180)=[{&(0x7f0000001040)=""/118, 0x76}, {&(0x7f00000010c0)=""/177, 0xb1}, {&(0x7f0000001240)=""/109, 0x6d}], 0x3, &(0x7f00000012c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001380)=""/47, 0x2f}, {&(0x7f00000013c0)=""/49, 0x31}, {0x0}], 0x3}}, {{&(0x7f0000001440)=@abs, 0x6e, &(0x7f0000001740)=[{&(0x7f00000014c0)=""/202, 0xca}, {&(0x7f00000015c0)=""/17, 0x11}, {&(0x7f0000001600)=""/86, 0x56}, {&(0x7f0000001680)=""/178, 0xb2}], 0x4, &(0x7f0000001780)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}], 0x6, 0x3, &(0x7f0000001980)) r6 = getpid() sched_getscheduler(r6) r7 = fcntl$getown(r1, 0x9) clone3(&(0x7f0000001a00)={0x240000000, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), {0x9}, &(0x7f0000000300)=""/89, 0x59, &(0x7f0000000380), &(0x7f00000019c0)=[0x0, 0x0, r5, r6, r7], 0x5}, 0x58) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r4, 0xff52786935aa6eb8, &(0x7f0000000080)={{}, {0x0, 0x3938700}}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x77359400}}, &(0x7f00000001c0)) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) wait4(r0, 0x0, 0x0, 0x0) 00:00:13 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000340)={0x1, {{0xa, 0x4e23, 0x8000, @loopback, 0x3}}, {{0xa, 0x4e22, 0x9, @mcast1, 0x8}}}, 0x108) 00:00:13 executing program 4: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d4cac", 0x5, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba868012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) 00:00:13 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a02", 0x11}, {&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) 00:00:13 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) r1 = gettid() wait4(r1, &(0x7f0000000080), 0x0, 0x0) tkill(r0, 0x2a) wait4(r1, &(0x7f00000000c0), 0x1, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) r2 = fork() wait4(r2, &(0x7f0000000040), 0x80000000, &(0x7f0000000140)) wait4(r0, &(0x7f0000000100), 0x2, 0x0) 00:00:13 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') bind(0xffffffffffffffff, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x108010, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 00:00:13 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x0, 0x1, {0x0, @usage=0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x500, @usage=0x2, 0x5, 0x0, [0x0, 0x0, 0x0, 0x2]}, {0x0, @usage=0xfff, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, @usage, 0xa7, 0x0, [0x4ce3, 0x0, 0x80000000]}, {0x0, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 00:00:13 executing program 0: r0 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r1 = socket(0x10, 0x803, 0x0) write(r1, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r1, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) accept$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0xd}, 0x50}) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000040)) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = socket(0x11, 0x3, 0x2) bind(r3, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) [ 121.464477][ T6019] loop4: detected capacity change from 0 to 264192 [ 121.488102][ T6029] loop2: detected capacity change from 0 to 264192 [ 121.526091][ T6019] FAT-fs (loop4): bogus number of FAT sectors [ 121.532191][ T6019] FAT-fs (loop4): Can't find a valid FAT filesystem [ 121.539488][ T6029] FAT-fs (loop2): invalid media value (0x00) [ 121.545525][ T6029] FAT-fs (loop2): Can't find a valid FAT filesystem [ 121.558186][ T6033] 9pnet: Insufficient options for proto=fd 00:00:13 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x0, 0x1, {0x0, @usage=0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x500, @usage=0x2, 0x5, 0x0, [0x0, 0x0, 0x0, 0x2]}, {0x0, @usage=0xfff, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, @usage, 0xa7, 0x0, [0x4ce3, 0x0, 0x80000000]}, {0x0, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 00:00:13 executing program 0: ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x9, 0xffffffff, 0x0, 0x7, 0x18, "1f2af780faf79c06d764cf310085166c83a752"}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = socket(0x11, 0x3, 0x2) r3 = socket(0x10, 0x803, 0x0) write(r3, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) r4 = dup2(r0, r2) ioctl$KDSETLED(r4, 0x4b32, 0xf5a) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r3, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) fstat(r3, &(0x7f0000000000)) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000100)) bind(r2, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="7472616e72665e6e6f3d07b2aa3cb709005ecc5b7e6bc70ca2c0ead8ede903310de7a3f4100713d0125d655ce1107583925dd52a261bad44cd8bfb00ba920305049c7fc34b3b270fc99078692205ca5f3caa61fb7d5c1079c34144e6257af8f5f10ed63169d848a77fb60fde408afa987db42a9b9376f6dd471757ef7b4ae3b1f4d965a866210e59f39ff5b8307db0", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="ac97b15af9c6d11098f5568e9dce840000"]) 00:00:13 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) r1 = gettid() r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/keycreate\x00', 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) write(r3, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r3, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) fcntl$dupfd(r2, 0x406, r3) wait4(r1, &(0x7f0000000080), 0x0, 0x0) tkill(r0, 0x2a) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) wait4(r0, &(0x7f0000000100), 0x2, 0x0) [ 121.577979][ T6034] 9pnet: Insufficient options for proto=fd 00:00:13 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = socket(0x11, 0x3, 0x2) bind(r2, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/99, 0x63}, {&(0x7f0000000200)=""/173, 0xad}, {&(0x7f0000000340)=""/191, 0xbf}], 0x3, 0x4000000, 0x9) 00:00:16 executing program 1: r0 = accept(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000140)=0x80) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r1, 0x2, 0x70bd2d, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x54}, 0x80) r2 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x17) tkill(r2, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) wait4(r2, 0x0, 0x0, 0x0) ptrace$setregs(0xf, r2, 0x5, &(0x7f0000000040)="539cf0ce1f6e604faa75e0f32b21cb4f427847c2a38377b9d523ff50287e0ed35e51f153eaf078dca1ad518ac1b88248491a395ce544a8e5b714941f897df151c90cac2fc5e717c1496393033df1a9dba2fe2f55f1f1c68ebf9464175fe25ddf570d7a625d4183a56aca871ea2ca0c5a7148899df6c1") 00:00:16 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x0, 0x1, {0x0, @usage=0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x500, @usage=0x2, 0x5, 0x0, [0x0, 0x0, 0x0, 0x2]}, {0x0, @usage=0xfff, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, @usage, 0xa7, 0x0, [0x4ce3, 0x0, 0x80000000]}, {0x1, @struct={0x0, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 00:00:16 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = socket(0x11, 0x3, 0x2) bind(r2, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd_index}, 0x7fff) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) r6 = syz_io_uring_setup(0x5f47, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r7 = io_uring_setup(0x73fb, &(0x7f0000000100)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r8) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd_index=0x2, 0x7, {0x0, r2}, 0xff, 0x1, 0x1, {0x0, r8, r0}}, 0x7) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000000)={'erspan0\x00', 0x0, 0x10, 0x700, 0x0, 0x4, {{0xb, 0x4, 0x0, 0x39, 0x2c, 0x66, 0x0, 0x7f, 0x29, 0x0, @multicast1, @remote, {[@timestamp={0x44, 0x18, 0x3f, 0x0, 0x7, [0xff, 0xa1, 0x3, 0x2, 0x401]}]}}}}}) 00:00:16 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='gid_map\x00') r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup2(r2, r1) ptrace$pokeuser(0x6, r0, 0x100000000, 0x100000000) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000000)={'mangle\x00', 0x0, [], '\x00', 0x0, 0x6000000}, &(0x7f0000000180)=0x54) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000280)={0x53, 0xfffffffffffffffb, 0x0, 0x3f, @scatter={0x2, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/157, 0x9d}, {&(0x7f0000000040)=""/36, 0x24}]}, 0xfffffffffffffffe, &(0x7f0000000200)=""/14, 0x9, 0x10030, 0x1, &(0x7f0000000240)}) r3 = gettid() wait4(r3, &(0x7f0000000080), 0x0, 0x0) tkill(r0, 0x2a) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) wait4(r0, &(0x7f0000000100), 0x2, 0x0) 00:00:16 executing program 4: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d4cac", 0x5, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba868012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) 00:00:16 executing program 2: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a02", 0x11}, {&(0x7f0000000280)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba868012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r1, r2, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x3) sendfile(r3, r1, 0x0, 0xffffff04) [ 124.178809][ T6065] loop2: detected capacity change from 0 to 264192 [ 124.184410][ T6063] loop4: detected capacity change from 0 to 264192 [ 124.221379][ T6065] FAT-fs (loop2): invalid media value (0x00) [ 124.225941][ T6063] FAT-fs (loop4): bogus number of FAT sectors [ 124.227455][ T6065] FAT-fs (loop2): Can't find a valid FAT filesystem [ 124.233514][ T6063] FAT-fs (loop4): Can't find a valid FAT filesystem 00:00:16 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x80000, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) lseek(r0, 0x100000001, 0x4) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r2, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) fremovexattr(r2, &(0x7f0000000000)=@random={'osx.', 'wfdno'}) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:00:16 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x0, 0x1, {0x0, @usage=0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x500, @usage=0x2, 0x5, 0x0, [0x0, 0x0, 0x0, 0x2]}, {0x0, @usage=0xfff, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, @usage, 0xa7, 0x0, [0x4ce3, 0x0, 0x80000000]}, {0x1, @struct={0x0, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 00:00:16 executing program 5: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x1d, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) r2 = gettid() wait4(r2, &(0x7f0000000080), 0x0, 0x0) tkill(r0, 0x2a) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) wait4(r0, &(0x7f0000000100), 0x2, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) 00:00:16 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xff}}, './file0\x00'}) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r2) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x128, r4, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x128}, 0x1, 0x0, 0x0, 0x10040005}, 0x46004) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000040)=0x2) [ 124.345947][ T6084] 9pnet: Insufficient options for proto=fd [ 124.368416][ T6089] 9pnet: Insufficient options for proto=fd 00:00:16 executing program 1: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) ptrace$cont(0x7, r0, 0x7fd, 0x3) wait4(r0, 0x0, 0x0, 0x0) clone3(&(0x7f0000000200)={0x4000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x22}, &(0x7f0000000100)=""/43, 0x2b, &(0x7f0000000140)=""/127, &(0x7f00000001c0)=[r0, r0, r0, r0], 0x4}, 0x58) 00:00:16 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x0, 0x1, {0x0, @usage=0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x500, @usage=0x2, 0x5, 0x0, [0x0, 0x0, 0x0, 0x2]}, {0x0, @usage=0xfff, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, @usage, 0xa7, 0x0, [0x4ce3, 0x0, 0x80000000]}, {0x1, @struct, 0x0, 0x6fe3, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 00:00:16 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='gid_map\x00') r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup2(r3, r2) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000000)={'mangle\x00', 0x0, [], '\x00', 0x0, 0x6000000}, &(0x7f0000000180)=0x54) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000340)="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") mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:00:16 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket(0x11, 0x3, 0x2) bind(r1, &(0x7f0000000180)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @local}}, 0x80) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@debug={'debug', 0x3d, 0x1}}, {@cache_mmap}]}}) 00:00:16 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x8000, 0x400, 0x0, 0xfffd, 0x3}}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = socket(0x11, 0x3, 0x2) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000340)={0x0, 0xfffffffffffffffd, 0x16, 0x1b, @buffer={0x0, 0xad, &(0x7f0000000200)=""/173}, &(0x7f0000000040)="e93bc63d0d85098b3c32f6fe78dd783914e2f3c667df", &(0x7f0000000100)=""/11, 0x1000, 0x4, 0x3, &(0x7f0000000140)}) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922eb18f005404b0e030a900c085c185d70a163ee340b76795008000000000000101013c581141b16ba0a0935b9566fd792bbf0e5bf5ff00001c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 00:00:16 executing program 3: r0 = clone3(&(0x7f00000011c0)={0x501c5400, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001240)={{}, 0x0, 0x0, @inherit={0x60, 0x0}, @subvolid}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) gettid() tkill(r0, 0x2a) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x0, 0x1, {0x0, @usage=0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x500, @usage=0x2, 0x5, 0x0, [0x0, 0x0, 0x0, 0x2]}, {0x0, @usage=0xfff, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, @usage, 0xa7, 0x0, [0x4ce3, 0x0, 0x80000000]}, {0x1, @struct, 0x0, 0x0, 0x6, 0x7f, 0x6, 0x5, 0x40, @usage=0x8, 0x6350, 0x1, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x1ff, 0x7, 0x8}}) wait4(r0, &(0x7f0000000100), 0x2, &(0x7f0000000140)) 00:00:17 executing program 4: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f0000000280)="dbed7d4cac17", 0x6}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = o