0000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:13 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x7, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000000000000500000000000000050000000000000000000080002400000000000000080000000000000000040000020000000800000000000000ffffffffffffffff9a01000000000000ff0700000000090000000000000009000000000000000400000000000040000000ef70a888d8933d210000a815ff8c4bdec553660100be00335113328bec52ef522ced03b400663b7c4bcde1cc40282b268782958c400906bf571e9cb0d711c4b339e2e881635422337ded64158a16f79493910e6c4b1d85cb9c9c8a1edc79084897e671d08c6dcc1371b4c3a1bee4d9284ce529ee2154938b8e2cdb7d656c8857fcf363b87299d82753efd3b2b4493b7809fbeac2"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 119.750467][ C1] sd 0:0:1:0: [sda] tag#120 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 119.760772][ C1] sd 0:0:1:0: [sda] tag#120 CDB: opcode=0xe5 (vendor) [ 119.767550][ C1] sd 0:0:1:0: [sda] tag#120 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 119.777037][ C1] sd 0:0:1:0: [sda] tag#120 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 119.786520][ C1] sd 0:0:1:0: [sda] tag#120 CDB[20]: ba 09:19:13 executing program 2: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e6", 0x3a}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(0xffffffffffffffff, 0x8, 0x1, 0x0) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001a80)=0x0) syz_open_procfs(r0, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) 09:19:13 executing program 2: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7f", 0x38}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(0xffffffffffffffff, 0x8, 0x1, 0x0) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001a80)=0x0) syz_open_procfs(r0, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) 09:19:13 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x7, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 119.819110][ C0] sd 0:0:1:0: [sda] tag#123 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 119.829415][ C0] sd 0:0:1:0: [sda] tag#123 CDB: opcode=0xe5 (vendor) [ 119.836200][ C0] sd 0:0:1:0: [sda] tag#123 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 119.845683][ C0] sd 0:0:1:0: [sda] tag#123 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 119.855153][ C0] sd 0:0:1:0: [sda] tag#123 CDB[20]: ba [ 119.881504][ T3523] loop0: detected capacity change from 0 to 262160 [ 119.909525][ T3526] loop4: detected capacity change from 0 to 262160 [ 119.909548][ C1] sd 0:0:1:0: [sda] tag#68 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s 09:19:13 executing program 2: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e130", 0x36}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(0xffffffffffffffff, 0x8, 0x1, 0x0) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001a80)=0x0) syz_open_procfs(r0, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) 09:19:13 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x7, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 119.926224][ C1] sd 0:0:1:0: [sda] tag#68 CDB: opcode=0xe5 (vendor) [ 119.932916][ C1] sd 0:0:1:0: [sda] tag#68 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 119.942306][ C1] sd 0:0:1:0: [sda] tag#68 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 119.951694][ C1] sd 0:0:1:0: [sda] tag#68 CDB[20]: ba 09:19:13 executing program 4: ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000080)={{}, 0x81, 0x0, 0xad10}) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) socket(0x2, 0x6, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:13 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x7, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:13 executing program 2: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e130", 0x36}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(0xffffffffffffffff, 0x8, 0x1, 0x0) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000000000000500000000000000050000000000000000000080002400000000000000080000000000000000040000020000000800000000000000ffffffffffffffff9a01000000000000ff0700000000090000000000000009000000000000000400000000000040000000ef70a888d8933d210000a815ff8c4bdec553660100be00335113328bec52ef522ced03b400663b7c4bcde1cc40282b268782958c400906bf571e9cb0d711c4b339e2e881635422337ded64158a16f79493910e6c4b1d85cb9c9c8a1edc79084897e671d08c6dcc1371b4c3a1bee4d9284ce529ee2154938b8e2cdb7d656c8857fcf363b87299d82753efd3b2b4493b7809fbeac2"]}, @devid}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001a80)=0x0) syz_open_procfs(r0, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) 09:19:13 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:13 executing program 5: ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000080)={{}, 0x81, 0x0, 0xad10}) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:13 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:13 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x7, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:13 executing program 2: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e130", 0x36}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(0xffffffffffffffff, 0x8, 0x1, 0x0) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000000000000500000000000000050000000000000000000080002400000000000000080000000000000000040000020000000800000000000000ffffffffffffffff9a01000000000000ff0700000000090000000000000009000000000000000400000000000040000000ef70a888d8933d210000a815ff8c4bdec553660100be00335113328bec52ef522ced03b400663b7c4bcde1cc40282b268782958c400906bf571e9cb0d711c4b339e2e881635422337ded64158a16f79493910e6c4b1d85cb9c9c8a1edc79084897e671d08c6dcc1371b4c3a1bee4d9284ce529ee2154938b8e2cdb7d656c8857fcf363b87299d82753efd3b2b4493b7809fbeac2"]}, @devid}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001a80)=0x0) syz_open_procfs(r0, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) 09:19:13 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x7, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:13 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x7, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:13 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x7, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 120.343840][ T3549] loop4: detected capacity change from 0 to 262160 [ 120.344567][ T3550] loop0: detected capacity change from 0 to 262160 09:19:13 executing program 2: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c", 0x37}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(0xffffffffffffffff, 0x8, 0x1, 0x0) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001a80)=0x0) syz_open_procfs(r0, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) 09:19:13 executing program 2: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c", 0x37}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(0xffffffffffffffff, 0x8, 0x1, 0x0) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000000000000500000000000000050000000000000000000080002400000000000000080000000000000000040000020000000800000000000000ffffffffffffffff9a01000000000000ff0700000000090000000000000009000000000000000400000000000040000000ef70a888d8933d210000a815ff8c4bdec553660100be00335113328bec52ef522ced03b400663b7c4bcde1cc40282b268782958c400906bf571e9cb0d711c4b339e2e881635422337ded64158a16f79493910e6c4b1d85cb9c9c8a1edc79084897e671d08c6dcc1371b4c3a1bee4d9284ce529ee2154938b8e2cdb7d656c8857fcf363b87299d82753efd3b2b4493b7809fbeac2"]}, @devid}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001a80)=0x0) syz_open_procfs(r0, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) 09:19:13 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x7, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000000000000500000000000000050000000000000000000080002400000000000000080000000000000000040000020000000800000000000000ffffffffffffffff9a01000000000000ff0700000000090000000000000009000000000000000400000000000040000000ef70a888d8933d210000a815ff8c4bdec553660100be00335113328bec52ef522ced03b400663b7c4bcde1cc40282b268782958c400906bf571e9cb0d711c4b339e2e881635422337ded64158a16f79493910e6c4b1d85cb9c9c8a1edc79084897e671d08c6dcc1371b4c3a1bee4d9284ce529ee2154938b8e2cdb7d656c8857fcf363b87299d82753efd3b2b4493b7809fbeac2"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:13 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:14 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:14 executing program 4: ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000080)={{}, 0x81, 0x0, 0xad10}) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) socket(0x2, 0x6, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:14 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:14 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x7, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:14 executing program 2: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c", 0x37}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(0xffffffffffffffff, 0x8, 0x1, 0x0) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000000000000500000000000000050000000000000000000080002400000000000000080000000000000000040000020000000800000000000000ffffffffffffffff9a01000000000000ff0700000000090000000000000009000000000000000400000000000040000000ef70a888d8933d210000a815ff8c4bdec553660100be00335113328bec52ef522ced03b400663b7c4bcde1cc40282b268782958c400906bf571e9cb0d711c4b339e2e881635422337ded64158a16f79493910e6c4b1d85cb9c9c8a1edc79084897e671d08c6dcc1371b4c3a1bee4d9284ce529ee2154938b8e2cdb7d656c8857fcf363b87299d82753efd3b2b4493b7809fbeac2"]}, @devid}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001a80)=0x0) syz_open_procfs(r0, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) [ 120.685046][ T3562] FAT-fs (loop3): bogus number of reserved sectors [ 120.691637][ T3562] FAT-fs (loop3): Can't find a valid FAT filesystem [ 120.723049][ T3568] loop5: detected capacity change from 0 to 262160 09:19:14 executing program 2: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7f", 0x38}, 0x68) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(0xffffffffffffffff, 0x8, 0x1, 0x0) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001a80)=0x0) syz_open_procfs(r0, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) 09:19:14 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x7, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:14 executing program 2: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7f", 0x38}, 0x68) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(0xffffffffffffffff, 0x8, 0x1, 0x0) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001a80)=0x0) syz_open_procfs(r0, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) [ 120.785265][ T3572] loop0: detected capacity change from 0 to 262160 09:19:14 executing program 2: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7f", 0x38}, 0x68) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(0xffffffffffffffff, 0x8, 0x1, 0x0) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001a80)=0x0) syz_open_procfs(r0, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) 09:19:14 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:14 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x7, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:14 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 120.986964][ T3584] loop5: detected capacity change from 0 to 262160 [ 121.005781][ T3586] FAT-fs (loop3): bogus number of reserved sectors [ 121.012350][ T3586] FAT-fs (loop3): Can't find a valid FAT filesystem 09:19:14 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x7, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:14 executing program 2: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7f", 0x38}, 0x68) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(0xffffffffffffffff, 0x8, 0x1, 0x0) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001a80)=0x0) syz_open_procfs(r0, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) 09:19:14 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:14 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:14 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:14 executing program 4: ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000080)={{}, 0x81, 0x0, 0xad10}) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) socket(0x2, 0x6, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:14 executing program 2: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7f", 0x38}, 0x68) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(0xffffffffffffffff, 0x8, 0x1, 0x0) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001a80)=0x0) syz_open_procfs(r0, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) 09:19:14 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x7, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 121.345190][ T3593] loop5: detected capacity change from 0 to 262160 [ 121.352774][ T3594] FAT-fs (loop3): bogus number of reserved sectors [ 121.359288][ T3594] FAT-fs (loop3): Can't find a valid FAT filesystem 09:19:14 executing program 2: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7f", 0x38}, 0x68) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(0xffffffffffffffff, 0x8, 0x1, 0x0) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000000000000500000000000000050000000000000000000080002400000000000000080000000000000000040000020000000800000000000000ffffffffffffffff9a01000000000000ff0700000000090000000000000009000000000000000400000000000040000000ef70a888d8933d210000a815ff8c4bdec553660100be00335113328bec52ef522ced03b400663b7c4bcde1cc40282b268782958c400906bf571e9cb0d711c4b339e2e881635422337ded64158a16f79493910e6c4b1d85cb9c9c8a1edc79084897e671d08c6dcc1371b4c3a1bee4d9284ce529ee2154938b8e2cdb7d656c8857fcf363b87299d82753efd3b2b4493b7809fbeac2"]}, @devid}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001a80)=0x0) syz_open_procfs(r0, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) 09:19:14 executing program 2: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7f", 0x38}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(0xffffffffffffffff, 0x8, 0x1, 0x0) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001a80)=0x0) syz_open_procfs(r0, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) [ 121.421613][ T3468] I/O error, dev loop0, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 121.433851][ T3602] loop0: detected capacity change from 0 to 262160 [ 121.453967][ T3468] I/O error, dev loop0, sector 262016 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 121.463600][ T3468] Buffer I/O error on dev loop0, logical block 32752, async page read 09:19:14 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x7, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:14 executing program 2: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7f", 0x38}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(0xffffffffffffffff, 0x8, 0x1, 0x0) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001a80)=0x0) syz_open_procfs(r0, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) 09:19:14 executing program 2: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7f", 0x38}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(0xffffffffffffffff, 0x8, 0x1, 0x0) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001a80)=0x0) syz_open_procfs(r0, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) 09:19:14 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x7, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:14 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:14 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 121.668510][ T3616] FAT-fs (loop3): bogus number of reserved sectors [ 121.675067][ T3616] FAT-fs (loop3): Can't find a valid FAT filesystem [ 121.698609][ T3618] loop5: detected capacity change from 0 to 262160 09:19:15 executing program 0: syz_mount_image$vfat(&(0x7f0000000040), 0x0, 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:15 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x7, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:15 executing program 2: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7f", 0x38}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(0xffffffffffffffff, 0x8, 0x1, 0x0) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001a80)=0x0) syz_open_procfs(r0, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) 09:19:15 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:15 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:15 executing program 4: ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000080)={{}, 0x81, 0x0, 0xad10}) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) socket(0x2, 0x6, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:15 executing program 2: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7f", 0x38}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(0xffffffffffffffff, 0x8, 0x1, 0x0) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000000000000500000000000000050000000000000000000080002400000000000000080000000000000000040000020000000800000000000000ffffffffffffffff9a01000000000000ff0700000000090000000000000009000000000000000400000000000040000000ef70a888d8933d210000a815ff8c4bdec553660100be00335113328bec52ef522ced03b400663b7c4bcde1cc40282b268782958c400906bf571e9cb0d711c4b339e2e881635422337ded64158a16f79493910e6c4b1d85cb9c9c8a1edc79084897e671d08c6dcc1371b4c3a1bee4d9284ce529ee2154938b8e2cdb7d656c8857fcf363b87299d82753efd3b2b4493b7809fbeac2"]}, @devid}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001a80)=0x0) syz_open_procfs(r0, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) 09:19:15 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x7, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 122.037991][ T3626] loop5: detected capacity change from 0 to 262160 [ 122.038022][ T3625] FAT-fs (loop3): bogus number of reserved sectors [ 122.051036][ T3625] FAT-fs (loop3): Can't find a valid FAT filesystem 09:19:15 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x7, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:15 executing program 2: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7f", 0x38}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(0xffffffffffffffff, 0x8, 0x1, 0x0) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001a80)=0x0) syz_open_procfs(r0, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) [ 122.106909][ T3468] I/O error, dev loop0, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 122.126861][ T3634] loop0: detected capacity change from 0 to 262160 [ 122.134527][ T3468] I/O error, dev loop0, sector 262016 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 122.144167][ T3468] Buffer I/O error on dev loop0, logical block 32752, async page read 09:19:15 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x7, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:15 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 122.308154][ T3642] loop5: detected capacity change from 0 to 262160 09:19:15 executing program 0: syz_mount_image$vfat(&(0x7f0000000040), 0x0, 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:15 executing program 2: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7f", 0x38}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(0xffffffffffffffff, 0x8, 0x1, 0x0) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001a80)=0x0) syz_open_procfs(r0, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) 09:19:15 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x7, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:15 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:15 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), 0x0, 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:15 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) socket(0x2, 0x6, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:15 executing program 2: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7f", 0x38}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(0xffffffffffffffff, 0x8, 0x1, 0x0) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001a80)=0x0) syz_open_procfs(r0, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) [ 122.565845][ T3647] FAT-fs (loop3): bogus number of reserved sectors [ 122.572415][ T3647] FAT-fs (loop3): Can't find a valid FAT filesystem [ 122.588217][ T3650] loop0: detected capacity change from 0 to 262160 [ 122.596261][ T3243] I/O error, dev loop5, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 122.604576][ T3652] loop5: detected capacity change from 0 to 262160 09:19:15 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x7, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:15 executing program 2: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7f", 0x38}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(0xffffffffffffffff, 0x8, 0x1, 0x0) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001a80)=0x0) syz_open_procfs(r0, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) [ 122.629783][ T3656] loop4: detected capacity change from 0 to 262160 09:19:16 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x7, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 122.677843][ T1909] I/O error, dev loop0, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 09:19:16 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x7, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:16 executing program 2: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7f", 0x38}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(0xffffffffffffffff, 0x8, 0x1, 0x0) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001a80)=0x0) syz_open_procfs(r0, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) 09:19:16 executing program 0: syz_mount_image$vfat(&(0x7f0000000040), 0x0, 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:16 executing program 2: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7f", 0x38}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(0xffffffffffffffff, 0x8, 0x1, 0x0) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000000000000500000000000000050000000000000000000080002400000000000000080000000000000000040000020000000800000000000000ffffffffffffffff9a01000000000000ff0700000000090000000000000009000000000000000400000000000040000000ef70a888d8933d210000a815ff8c4bdec553660100be00335113328bec52ef522ced03b400663b7c4bcde1cc40282b268782958c400906bf571e9cb0d711c4b339e2e881635422337ded64158a16f79493910e6c4b1d85cb9c9c8a1edc79084897e671d08c6dcc1371b4c3a1bee4d9284ce529ee2154938b8e2cdb7d656c8857fcf363b87299d82753efd3b2b4493b7809fbeac2"]}, @devid}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001a80)=0x0) syz_open_procfs(r0, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) 09:19:16 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x7, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000000000000500000000000000050000000000000000000080002400000000000000080000000000000000040000020000000800000000000000ffffffffffffffff9a01000000000000ff0700000000090000000000000009000000000000000400000000000040000000ef70a888d8933d210000a815ff8c4bdec553660100be00335113328bec52ef522ced03b400663b7c4bcde1cc40282b268782958c400906bf571e9cb0d711c4b339e2e881635422337ded64158a16f79493910e6c4b1d85cb9c9c8a1edc79084897e671d08c6dcc1371b4c3a1bee4d9284ce529ee2154938b8e2cdb7d656c8857fcf363b87299d82753efd3b2b4493b7809fbeac2"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:16 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), 0x0, 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:16 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 122.917230][ T3671] loop0: detected capacity change from 0 to 262160 [ 122.925562][ T3677] loop5: detected capacity change from 0 to 262160 [ 122.932606][ T3675] loop3: detected capacity change from 0 to 262160 [ 122.942045][ T3675] FAT-fs (loop3): bogus number of reserved sectors [ 122.948637][ T3675] FAT-fs (loop3): Can't find a valid FAT filesystem [ 122.995613][ T1909] I/O error, dev loop5, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 122.995688][ T3243] I/O error, dev loop0, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 09:19:16 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x7, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:16 executing program 2: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7f", 0x38}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(0xffffffffffffffff, 0x8, 0x1, 0x0) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001a80)=0x0) syz_open_procfs(r0, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) 09:19:16 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:16 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) socket(0x2, 0x6, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:16 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), 0x0, 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:16 executing program 2: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7f", 0x38}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(0xffffffffffffffff, 0x8, 0x1, 0x0) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001a80)=0x0) syz_open_procfs(r0, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) [ 123.267573][ T3681] loop3: detected capacity change from 0 to 262160 [ 123.277155][ T3686] loop5: detected capacity change from 0 to 262160 09:19:16 executing program 2: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7f", 0x38}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(0xffffffffffffffff, 0x8, 0x1, 0x0) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001a80)=0x0) syz_open_procfs(r0, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) [ 123.340199][ T3690] loop4: detected capacity change from 0 to 262160 [ 123.346766][ T3681] FAT-fs (loop3): bogus number of reserved sectors [ 123.353294][ T3681] FAT-fs (loop3): Can't find a valid FAT filesystem 09:19:16 executing program 0: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:16 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(0x0, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x7, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:16 executing program 2: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7f", 0x38}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(0xffffffffffffffff, 0x8, 0x1, 0x0) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001a80)=0x0) syz_open_procfs(r0, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) 09:19:16 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:16 executing program 2: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7f", 0x38}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(0xffffffffffffffff, 0x8, 0x1, 0x0) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000000000000500000000000000050000000000000000000080002400000000000000080000000000000000040000020000000800000000000000ffffffffffffffff9a01000000000000ff0700000000090000000000000009000000000000000400000000000040000000ef70a888d8933d210000a815ff8c4bdec553660100be00335113328bec52ef522ced03b400663b7c4bcde1cc40282b268782958c400906bf571e9cb0d711c4b339e2e881635422337ded64158a16f79493910e6c4b1d85cb9c9c8a1edc79084897e671d08c6dcc1371b4c3a1bee4d9284ce529ee2154938b8e2cdb7d656c8857fcf363b87299d82753efd3b2b4493b7809fbeac2"]}, @devid}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001a80)=0x0) syz_open_procfs(r0, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) 09:19:16 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(0x0, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x7, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:16 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:16 executing program 2: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7f", 0x38}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(0xffffffffffffffff, 0x8, 0x1, 0x0) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000000000000500000000000000050000000000000000000080002400000000000000080000000000000000040000020000000800000000000000ffffffffffffffff9a01000000000000ff0700000000090000000000000009000000000000000400000000000040000000ef70a888d8933d210000a815ff8c4bdec553660100be00335113328bec52ef522ced03b400663b7c4bcde1cc40282b268782958c400906bf571e9cb0d711c4b339e2e881635422337ded64158a16f79493910e6c4b1d85cb9c9c8a1edc79084897e671d08c6dcc1371b4c3a1bee4d9284ce529ee2154938b8e2cdb7d656c8857fcf363b87299d82753efd3b2b4493b7809fbeac2"]}, @devid}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001a80)=0x0) syz_open_procfs(r0, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) [ 123.585163][ T3704] loop3: detected capacity change from 0 to 262160 [ 123.630748][ T3704] FAT-fs (loop3): bogus number of reserved sectors [ 123.637319][ T3704] FAT-fs (loop3): Can't find a valid FAT filesystem 09:19:17 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) socket(0x2, 0x6, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:17 executing program 2: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7f", 0x38}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0xd6d) fallocate(0xffffffffffffffff, 0x8, 0x1, 0x0) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000000000000500000000000000050000000000000000000080002400000000000000080000000000000000040000020000000800000000000000ffffffffffffffff9a01000000000000ff0700000000090000000000000009000000000000000400000000000040000000ef70a888d8933d210000a815ff8c4bdec553660100be00335113328bec52ef522ced03b400663b7c4bcde1cc40282b268782958c400906bf571e9cb0d711c4b339e2e881635422337ded64158a16f79493910e6c4b1d85cb9c9c8a1edc79084897e671d08c6dcc1371b4c3a1bee4d9284ce529ee2154938b8e2cdb7d656c8857fcf363b87299d82753efd3b2b4493b7809fbeac2"]}, @devid}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001a80)=0x0) syz_open_procfs(r0, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) 09:19:17 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(0x0, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x7, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:17 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:17 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{0x0}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:17 executing program 0: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:17 executing program 2: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7f", 0x38}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0xd6d) fallocate(0xffffffffffffffff, 0x8, 0x1, 0x0) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001a80)=0x0) syz_open_procfs(r0, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) 09:19:17 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x7, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 123.945929][ T3715] loop3: detected capacity change from 0 to 262160 [ 123.965328][ T3715] FAT-fs (loop3): bogus number of reserved sectors [ 123.972012][ T3715] FAT-fs (loop3): Can't find a valid FAT filesystem 09:19:17 executing program 2: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7f", 0x38}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0xd6d) fallocate(0xffffffffffffffff, 0x8, 0x1, 0x0) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001a80)=0x0) syz_open_procfs(r0, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) [ 124.026203][ C1] scsi_io_completion_action: 24 callbacks suppressed [ 124.026239][ C1] sd 0:0:1:0: [sda] tag#120 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 124.028368][ T1909] I/O error, dev loop4, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 124.032986][ C1] sd 0:0:1:0: [sda] tag#120 CDB: opcode=0xe5 (vendor) [ 124.059881][ C1] sd 0:0:1:0: [sda] tag#120 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c 09:19:17 executing program 2: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7f", 0x38}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/227, 0xe3, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x1, 0x0) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001a80)=0x0) syz_open_procfs(r0, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) [ 124.069352][ C1] sd 0:0:1:0: [sda] tag#120 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 124.078859][ C1] sd 0:0:1:0: [sda] tag#120 CDB[20]: ba [ 124.084801][ T3725] loop4: detected capacity change from 0 to 262160 09:19:17 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x7, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000000000000500000000000000050000000000000000000080002400000000000000080000000000000000040000020000000800000000000000ffffffffffffffff9a01000000000000ff0700000000090000000000000009000000000000000400000000000040000000ef70a888d8933d210000a815ff8c4bdec553660100be00335113328bec52ef522ced03b400663b7c4bcde1cc40282b268782958c400906bf571e9cb0d711c4b339e2e881635422337ded64158a16f79493910e6c4b1d85cb9c9c8a1edc79084897e671d08c6dcc1371b4c3a1bee4d9284ce529ee2154938b8e2cdb7d656c8857fcf363b87299d82753efd3b2b4493b7809fbeac2"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:17 executing program 2: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7f", 0x38}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/227, 0xe3, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x1, 0x0) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000000000000500000000000000050000000000000000000080002400000000000000080000000000000000040000020000000800000000000000ffffffffffffffff9a01000000000000ff0700000000090000000000000009000000000000000400000000000040000000ef70a888d8933d210000a815ff8c4bdec553660100be00335113328bec52ef522ced03b400663b7c4bcde1cc40282b268782958c400906bf571e9cb0d711c4b339e2e881635422337ded64158a16f79493910e6c4b1d85cb9c9c8a1edc79084897e671d08c6dcc1371b4c3a1bee4d9284ce529ee2154938b8e2cdb7d656c8857fcf363b87299d82753efd3b2b4493b7809fbeac2"]}, @devid}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001a80)=0x0) syz_open_procfs(r0, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) [ 124.182835][ C0] sd 0:0:1:0: [sda] tag#87 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 124.193048][ C0] sd 0:0:1:0: [sda] tag#87 CDB: opcode=0xe5 (vendor) [ 124.199722][ C0] sd 0:0:1:0: [sda] tag#87 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 124.209250][ C0] sd 0:0:1:0: [sda] tag#87 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 124.218637][ C0] sd 0:0:1:0: [sda] tag#87 CDB[20]: ba 09:19:17 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x7, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000000000000500000000000000050000000000000000000080002400000000000000080000000000000000040000020000000800000000000000ffffffffffffffff9a01000000000000ff0700000000090000000000000009000000000000000400000000000040000000ef70a888d8933d210000a815ff8c4bdec553660100be00335113328bec52ef522ced03b400663b7c4bcde1cc40282b268782958c400906bf571e9cb0d711c4b339e2e881635422337ded64158a16f79493910e6c4b1d85cb9c9c8a1edc79084897e671d08c6dcc1371b4c3a1bee4d9284ce529ee2154938b8e2cdb7d656c8857fcf363b87299d82753efd3b2b4493b7809fbeac2"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:17 executing program 2: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7f", 0x38}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/227, 0xe3, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x1, 0x0) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001a80)=0x0) syz_open_procfs(r0, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) 09:19:17 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:17 executing program 0: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:17 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) socket(0x2, 0x6, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:17 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{0x0}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 124.514182][ T3738] loop3: detected capacity change from 0 to 262160 [ 124.516869][ C1] sd 0:0:1:0: [sda] tag#69 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 124.530888][ C1] sd 0:0:1:0: [sda] tag#69 CDB: opcode=0xe5 (vendor) [ 124.537582][ C1] sd 0:0:1:0: [sda] tag#69 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 124.546987][ C1] sd 0:0:1:0: [sda] tag#69 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 124.553616][ T3738] FAT-fs (loop3): bogus number of reserved sectors 09:19:17 executing program 2: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7f", 0x38}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(0xffffffffffffffff, 0x0, 0x1, 0x0) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001a80)=0x0) syz_open_procfs(r0, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) 09:19:17 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 124.556379][ C1] sd 0:0:1:0: [sda] tag#69 CDB[20]: ba [ 124.562858][ T3738] FAT-fs (loop3): Can't find a valid FAT filesystem 09:19:17 executing program 2: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7f", 0x38}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(0xffffffffffffffff, 0x0, 0x1, 0x0) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001a80)=0x0) syz_open_procfs(r0, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) [ 124.618078][ T1909] I/O error, dev loop4, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 124.638992][ C0] sd 0:0:1:0: [sda] tag#90 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 124.649196][ C0] sd 0:0:1:0: [sda] tag#90 CDB: opcode=0xe5 (vendor) [ 124.655886][ C0] sd 0:0:1:0: [sda] tag#90 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c 09:19:18 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 124.665267][ C0] sd 0:0:1:0: [sda] tag#90 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 124.674658][ C0] sd 0:0:1:0: [sda] tag#90 CDB[20]: ba [ 124.680480][ T3751] loop4: detected capacity change from 0 to 262160 09:19:18 executing program 2: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7f", 0x38}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000000000000500000000000000050000000000000000000080002400000000000000080000000000000000040000020000000800000000000000ffffffffffffffff9a01000000000000ff0700000000090000000000000009000000000000000400000000000040000000ef70a888d8933d210000a815ff8c4bdec553660100be00335113328bec52ef522ced03b400663b7c4bcde1cc40282b268782958c400906bf571e9cb0d711c4b339e2e881635422337ded64158a16f79493910e6c4b1d85cb9c9c8a1edc79084897e671d08c6dcc1371b4c3a1bee4d9284ce529ee2154938b8e2cdb7d656c8857fcf363b87299d82753efd3b2b4493b7809fbeac2"]}, @devid}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001a80)=0x0) syz_open_procfs(r0, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) 09:19:18 executing program 2: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7f", 0x38}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001a80)=0x0) syz_open_procfs(r0, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) 09:19:18 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 124.719815][ C1] sd 0:0:1:0: [sda] tag#90 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 124.730032][ C1] sd 0:0:1:0: [sda] tag#90 CDB: opcode=0xe5 (vendor) [ 124.736736][ C1] sd 0:0:1:0: [sda] tag#90 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 124.746131][ C1] sd 0:0:1:0: [sda] tag#90 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 124.755517][ C1] sd 0:0:1:0: [sda] tag#90 CDB[20]: ba 09:19:18 executing program 2: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7f", 0x38}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) inotify_init1(0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001a80)=0x0) syz_open_procfs(r0, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) [ 124.803233][ C1] sd 0:0:1:0: [sda] tag#66 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 124.813457][ C1] sd 0:0:1:0: [sda] tag#66 CDB: opcode=0xe5 (vendor) [ 124.820146][ C1] sd 0:0:1:0: [sda] tag#66 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 124.829536][ C1] sd 0:0:1:0: [sda] tag#66 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 124.838950][ C1] sd 0:0:1:0: [sda] tag#66 CDB[20]: ba 09:19:18 executing program 2: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7f", 0x38}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) inotify_init1(0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001a80)=0x0) syz_open_procfs(r0, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) 09:19:18 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:18 executing program 2: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7f", 0x38}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) inotify_init1(0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000000000000500000000000000050000000000000000000080002400000000000000080000000000000000040000020000000800000000000000ffffffffffffffff9a01000000000000ff0700000000090000000000000009000000000000000400000000000040000000ef70a888d8933d210000a815ff8c4bdec553660100be00335113328bec52ef522ced03b400663b7c4bcde1cc40282b268782958c400906bf571e9cb0d711c4b339e2e881635422337ded64158a16f79493910e6c4b1d85cb9c9c8a1edc79084897e671d08c6dcc1371b4c3a1bee4d9284ce529ee2154938b8e2cdb7d656c8857fcf363b87299d82753efd3b2b4493b7809fbeac2"]}, @devid}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001a80)=0x0) syz_open_procfs(r0, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) 09:19:18 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:18 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{0x0}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:18 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), 0x0, 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) socket(0x2, 0x6, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:18 executing program 0: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 125.156882][ T3774] loop3: detected capacity change from 0 to 262160 [ 125.158372][ C1] sd 0:0:1:0: [sda] tag#118 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 125.168110][ T3773] FAT-fs (loop5): bogus number of reserved sectors [ 125.173688][ C1] sd 0:0:1:0: [sda] tag#118 CDB: opcode=0xe5 (vendor) [ 125.180160][ T3773] FAT-fs (loop5): Can't find a valid FAT filesystem [ 125.186917][ C1] sd 0:0:1:0: [sda] tag#118 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c 09:19:18 executing program 2: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7f", 0x38}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001a80)=0x0) syz_open_procfs(r0, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) 09:19:18 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, 0x0, 0x0, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000000000000500000000000000050000000000000000000080002400000000000000080000000000000000040000020000000800000000000000ffffffffffffffff9a01000000000000ff0700000000090000000000000009000000000000000400000000000040000000ef70a888d8933d210000a815ff8c4bdec553660100be00335113328bec52ef522ced03b400663b7c4bcde1cc40282b268782958c400906bf571e9cb0d711c4b339e2e881635422337ded64158a16f79493910e6c4b1d85cb9c9c8a1edc79084897e671d08c6dcc1371b4c3a1bee4d9284ce529ee2154938b8e2cdb7d656c8857fcf363b87299d82753efd3b2b4493b7809fbeac2"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:18 executing program 2: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7f", 0x38}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001a80)=0x0) syz_open_procfs(r0, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) [ 125.186937][ C1] sd 0:0:1:0: [sda] tag#118 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 125.208734][ T3774] FAT-fs (loop3): bogus number of reserved sectors [ 125.212410][ C1] sd 0:0:1:0: [sda] tag#118 CDB[20]: ba [ 125.212465][ T3775] FAT-fs (loop0): bogus number of reserved sectors [ 125.218918][ T3774] FAT-fs (loop3): Can't find a valid FAT filesystem [ 125.224462][ T3775] FAT-fs (loop0): Can't find a valid FAT filesystem 09:19:18 executing program 2: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7f", 0x38}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x0) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001a80)=0x0) syz_open_procfs(r0, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) 09:19:18 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, 0x0, 0x0, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 125.272384][ C0] sd 0:0:1:0: [sda] tag#121 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 125.282681][ C0] sd 0:0:1:0: [sda] tag#121 CDB: opcode=0xe5 (vendor) [ 125.289463][ C0] sd 0:0:1:0: [sda] tag#121 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 125.298939][ C0] sd 0:0:1:0: [sda] tag#121 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 125.308424][ C0] sd 0:0:1:0: [sda] tag#121 CDB[20]: ba 09:19:18 executing program 2: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7f", 0x38}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x0) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001a80)=0x0) syz_open_procfs(r0, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) [ 125.344945][ C0] sd 0:0:1:0: [sda] tag#80 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 125.355166][ C0] sd 0:0:1:0: [sda] tag#80 CDB: opcode=0xe5 (vendor) [ 125.361856][ C0] sd 0:0:1:0: [sda] tag#80 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 125.371224][ C0] sd 0:0:1:0: [sda] tag#80 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 125.380621][ C0] sd 0:0:1:0: [sda] tag#80 CDB[20]: ba 09:19:18 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:18 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, 0x0, 0x0, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000000000000500000000000000050000000000000000000080002400000000000000080000000000000000040000020000000800000000000000ffffffffffffffff9a01000000000000ff0700000000090000000000000009000000000000000400000000000040000000ef70a888d8933d210000a815ff8c4bdec553660100be00335113328bec52ef522ced03b400663b7c4bcde1cc40282b268782958c400906bf571e9cb0d711c4b339e2e881635422337ded64158a16f79493910e6c4b1d85cb9c9c8a1edc79084897e671d08c6dcc1371b4c3a1bee4d9284ce529ee2154938b8e2cdb7d656c8857fcf363b87299d82753efd3b2b4493b7809fbeac2"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:18 executing program 2: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7f", 0x38}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x0) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001a80)=0x0) syz_open_procfs(r0, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) [ 125.462194][ T3243] I/O error, dev loop3, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 125.481095][ T3468] I/O error, dev loop4, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 125.505352][ C1] sd 0:0:1:0: [sda] tag#73 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 125.508437][ T3798] FAT-fs (loop5): bogus number of reserved sectors [ 125.515553][ C1] sd 0:0:1:0: [sda] tag#73 CDB: opcode=0xe5 (vendor) [ 125.522061][ T3798] FAT-fs (loop5): Can't find a valid FAT filesystem [ 125.528734][ C1] sd 0:0:1:0: [sda] tag#73 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 125.544656][ C1] sd 0:0:1:0: [sda] tag#73 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 125.554105][ C1] sd 0:0:1:0: [sda] tag#73 CDB[20]: ba 09:19:18 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 125.559939][ T3796] loop4: detected capacity change from 0 to 262160 [ 125.580566][ T3800] loop3: detected capacity change from 0 to 262160 [ 125.608058][ T3800] FAT-fs (loop3): bogus number of reserved sectors [ 125.614626][ T3800] FAT-fs (loop3): Can't find a valid FAT filesystem 09:19:19 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), 0x0, 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) socket(0x2, 0x6, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:19 executing program 2: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7f", 0x38}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_open_procfs(0x0, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) 09:19:19 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0x0) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:19 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:19 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:19 executing program 0: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 125.898871][ T3809] loop3: detected capacity change from 0 to 262160 [ 125.906588][ T3808] FAT-fs (loop0): bogus number of reserved sectors [ 125.913125][ T3808] FAT-fs (loop0): Can't find a valid FAT filesystem [ 125.920100][ T3805] FAT-fs (loop5): bogus number of reserved sectors [ 125.926633][ T3805] FAT-fs (loop5): Can't find a valid FAT filesystem 09:19:19 executing program 2: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7f", 0x38}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_open_procfs(0x0, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) 09:19:19 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0x0) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:19 executing program 2: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7f", 0x38}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_open_procfs(0x0, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) [ 125.945914][ T3812] loop4: detected capacity change from 0 to 262160 [ 125.955617][ T3809] FAT-fs (loop3): bogus number of reserved sectors [ 125.962259][ T3809] FAT-fs (loop3): Can't find a valid FAT filesystem [ 125.981875][ T3243] I/O error, dev loop4, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 09:19:19 executing program 2: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7f", 0x38}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001a80)) syz_open_procfs(0x0, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) 09:19:19 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0x0) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:19 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(0xffffffffffffffff, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:19 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), 0x0, 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) socket(0x2, 0x6, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:19 executing program 2: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7f", 0x38}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001a80)) syz_open_procfs(0x0, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) 09:19:19 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(0xffffffffffffffff, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000000000000500000000000000050000000000000000000080002400000000000000080000000000000000040000020000000800000000000000ffffffffffffffff9a01000000000000ff0700000000090000000000000009000000000000000400000000000040000000ef70a888d8933d210000a815ff8c4bdec553660100be00335113328bec52ef522ced03b400663b7c4bcde1cc40282b268782958c400906bf571e9cb0d711c4b339e2e881635422337ded64158a16f79493910e6c4b1d85cb9c9c8a1edc79084897e671d08c6dcc1371b4c3a1bee4d9284ce529ee2154938b8e2cdb7d656c8857fcf363b87299d82753efd3b2b4493b7809fbeac2"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:19 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:19 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:19 executing program 0: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 126.349828][ T3835] loop3: detected capacity change from 0 to 262160 [ 126.352691][ T3837] loop4: detected capacity change from 0 to 262160 [ 126.356391][ T3833] FAT-fs (loop5): bogus number of reserved sectors [ 126.369372][ T3833] FAT-fs (loop5): Can't find a valid FAT filesystem [ 126.384202][ T3828] FAT-fs (loop0): bogus number of reserved sectors [ 126.390724][ T3828] FAT-fs (loop0): Can't find a valid FAT filesystem 09:19:19 executing program 2: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7f", 0x38}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001a80)) syz_open_procfs(0x0, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) 09:19:19 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(0xffffffffffffffff, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 126.404199][ T3835] FAT-fs (loop3): bogus number of reserved sectors [ 126.410709][ T3835] FAT-fs (loop3): Can't find a valid FAT filesystem 09:19:19 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x0, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:19 executing program 2: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7f", 0x38}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001a80)=0x0) syz_open_procfs(r0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) 09:19:19 executing program 2: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7f", 0x38}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001a80)=0x0) syz_open_procfs(r0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) 09:19:19 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x0, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:20 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) socket(0x2, 0x6, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:20 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400", 0xc}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:20 executing program 2: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7f", 0x38}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001a80)=0x0) syz_open_procfs(r0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) 09:19:20 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x0, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:20 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:20 executing program 0: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:20 executing program 2: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:20 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 126.832417][ T3860] loop3: detected capacity change from 0 to 262160 [ 126.841844][ T3862] FAT-fs (loop5): bogus number of reserved sectors [ 126.848382][ T3862] FAT-fs (loop5): Can't find a valid FAT filesystem [ 126.850950][ T3863] FAT-fs (loop0): bogus number of reserved sectors [ 126.861527][ T3863] FAT-fs (loop0): Can't find a valid FAT filesystem [ 126.872636][ T3860] FAT-fs (loop3): bogus number of reserved sectors 09:19:20 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 126.879490][ T3860] FAT-fs (loop3): Can't find a valid FAT filesystem [ 126.894617][ T3865] FAT-fs (loop2): bogus number of reserved sectors [ 126.901160][ T3865] FAT-fs (loop2): Can't find a valid FAT filesystem 09:19:20 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:20 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:20 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 127.135388][ T3877] FAT-fs (loop5): bogus number of reserved sectors [ 127.141991][ T3877] FAT-fs (loop5): Can't find a valid FAT filesystem 09:19:20 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) socket(0x2, 0x6, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:20 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:20 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400", 0xc}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:20 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 127.472020][ T3882] loop5: detected capacity change from 0 to 262160 [ 127.479897][ T3883] loop3: detected capacity change from 0 to 262160 [ 127.492716][ T3882] FAT-fs (loop5): bogus number of reserved sectors [ 127.499285][ T3882] FAT-fs (loop5): Can't find a valid FAT filesystem [ 127.514989][ T3883] FAT-fs (loop3): bogus number of reserved sectors 09:19:20 executing program 0: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:20 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 127.521535][ T3883] FAT-fs (loop3): Can't find a valid FAT filesystem [ 127.569289][ T3887] FAT-fs (loop0): bogus number of reserved sectors [ 127.575839][ T3887] FAT-fs (loop0): Can't find a valid FAT filesystem 09:19:20 executing program 2: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:20 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000000000000500000000000000050000000000000000000080002400000000000000080000000000000000040000020000000800000000000000ffffffffffffffff9a01000000000000ff0700000000090000000000000009000000000000000400000000000040000000ef70a888d8933d210000a815ff8c4bdec553660100be00335113328bec52ef522ced03b400663b7c4bcde1cc40282b268782958c400906bf571e9cb0d711c4b339e2e881635422337ded64158a16f79493910e6c4b1d85cb9c9c8a1edc79084897e671d08c6dcc1371b4c3a1bee4d9284ce529ee2154938b8e2cdb7d656c8857fcf363b87299d82753efd3b2b4493b7809fbeac2"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:21 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:21 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 127.697329][ T3893] FAT-fs (loop2): bogus number of reserved sectors [ 127.703919][ T3893] FAT-fs (loop2): Can't find a valid FAT filesystem 09:19:21 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400", 0xc}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:21 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 127.848265][ T3900] loop3: detected capacity change from 0 to 262160 [ 127.856930][ T3901] loop5: detected capacity change from 0 to 262160 [ 127.868265][ T3900] FAT-fs (loop3): bogus number of reserved sectors [ 127.874863][ T3900] FAT-fs (loop3): Can't find a valid FAT filesystem [ 127.889081][ T3901] FAT-fs (loop5): bogus number of reserved sectors [ 127.895641][ T3901] FAT-fs (loop5): Can't find a valid FAT filesystem 09:19:21 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) socket(0x2, 0x6, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:21 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:21 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240", 0x12}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:21 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:21 executing program 0: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 128.211393][ T3906] loop3: detected capacity change from 0 to 262160 [ 128.214537][ T3907] loop5: detected capacity change from 0 to 262160 [ 128.255389][ T3906] FAT-fs (loop3): invalid media value (0x00) [ 128.261545][ T3906] FAT-fs (loop3): Can't find a valid FAT filesystem [ 128.281229][ T3911] FAT-fs (loop0): bogus number of reserved sectors [ 128.287805][ T3911] FAT-fs (loop0): Can't find a valid FAT filesystem 09:19:21 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 128.301401][ T3907] FAT-fs (loop5): bogus number of reserved sectors [ 128.307932][ T3907] FAT-fs (loop5): Can't find a valid FAT filesystem 09:19:21 executing program 2: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:21 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:21 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{0x0}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:21 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240", 0x12}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:21 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 128.525101][ T3920] FAT-fs (loop2): bogus number of reserved sectors [ 128.531705][ T3920] FAT-fs (loop2): Can't find a valid FAT filesystem [ 128.558871][ T3922] loop3: detected capacity change from 0 to 262160 [ 128.568219][ T3926] loop5: detected capacity change from 0 to 262160 09:19:21 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 128.589493][ T3922] FAT-fs (loop3): invalid media value (0x00) [ 128.595638][ T3922] FAT-fs (loop3): Can't find a valid FAT filesystem [ 128.602322][ T3926] FAT-fs (loop5): bogus number of reserved sectors [ 128.608907][ T3926] FAT-fs (loop5): Can't find a valid FAT filesystem 09:19:22 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:22 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240", 0x12}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:22 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) socket(0x2, 0x6, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:22 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{0x0}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:22 executing program 0: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 128.948734][ T3932] loop3: detected capacity change from 0 to 262160 [ 128.957116][ T3935] loop5: detected capacity change from 0 to 262160 [ 128.970461][ T3932] FAT-fs (loop3): invalid media value (0x00) [ 128.976487][ T3932] FAT-fs (loop3): Can't find a valid FAT filesystem 09:19:22 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 128.992755][ T3939] FAT-fs (loop4): bogus number of reserved sectors [ 128.997099][ T3938] loop0: detected capacity change from 0 to 262160 [ 128.999303][ T3939] FAT-fs (loop4): Can't find a valid FAT filesystem [ 129.014927][ T3935] FAT-fs (loop5): bogus number of reserved sectors [ 129.021472][ T3935] FAT-fs (loop5): Can't find a valid FAT filesystem [ 129.044259][ T3938] FAT-fs (loop0): bogus number of reserved sectors [ 129.050784][ T3938] FAT-fs (loop0): Can't find a valid FAT filesystem 09:19:22 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:22 executing program 2: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:22 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080", 0x15}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:22 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{0x0}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:22 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) socket(0x2, 0x6, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:22 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 129.269575][ T3948] loop3: detected capacity change from 0 to 262160 [ 129.293771][ T3950] FAT-fs (loop2): bogus number of reserved sectors [ 129.300333][ T3950] FAT-fs (loop2): Can't find a valid FAT filesystem [ 129.304886][ T3952] loop5: detected capacity change from 0 to 262160 [ 129.341978][ T3948] FAT-fs (loop3): invalid media value (0x00) [ 129.348010][ T3948] FAT-fs (loop3): Can't find a valid FAT filesystem [ 129.363029][ T3956] FAT-fs (loop4): bogus number of reserved sectors [ 129.369555][ T3956] FAT-fs (loop4): Can't find a valid FAT filesystem [ 129.380270][ T3952] FAT-fs (loop5): bogus number of reserved sectors 09:19:22 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x11, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c92", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 129.386865][ T3952] FAT-fs (loop5): Can't find a valid FAT filesystem 09:19:22 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x11, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c92", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:22 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x11, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c92", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:22 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080", 0x15}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 129.615618][ T3965] loop3: detected capacity change from 0 to 262160 [ 129.638128][ T3965] FAT-fs (loop3): invalid media value (0x00) [ 129.644169][ T3965] FAT-fs (loop3): Can't find a valid FAT filesystem 09:19:23 executing program 0: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:23 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x19, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d4", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000000000000500000000000000050000000000000000000080002400000000000000080000000000000000040000020000000800000000000000ffffffffffffffff9a01000000000000ff0700000000090000000000000009000000000000000400000000000040000000ef70a888d8933d210000a815ff8c4bdec553660100be00335113328bec52ef522ced03b400663b7c4bcde1cc40282b268782958c400906bf571e9cb0d711c4b339e2e881635422337ded64158a16f79493910e6c4b1d85cb9c9c8a1edc79084897e671d08c6dcc1371b4c3a1bee4d9284ce529ee2154938b8e2cdb7d656c8857fcf363b87299d82753efd3b2b4493b7809fbeac2"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:23 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 129.727075][ T3968] loop5: detected capacity change from 0 to 262160 [ 129.753999][ T3971] loop0: detected capacity change from 0 to 262160 [ 129.780917][ T3971] FAT-fs (loop0): bogus number of reserved sectors [ 129.787512][ T3971] FAT-fs (loop0): Can't find a valid FAT filesystem [ 129.795535][ T3968] FAT-fs (loop5): bogus number of reserved sectors [ 129.802093][ T3968] FAT-fs (loop5): Can't find a valid FAT filesystem [ 129.827372][ T1909] I/O error, dev loop0, sector 262144 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 09:19:23 executing program 2: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) socket(0x2, 0x6, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:23 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x19, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d4", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:23 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080", 0x15}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:23 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:23 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) socket(0x2, 0x6, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 130.117614][ T3975] loop3: detected capacity change from 0 to 262160 [ 130.119746][ T3977] loop5: detected capacity change from 0 to 262160 [ 130.137981][ T3978] FAT-fs (loop4): bogus number of reserved sectors [ 130.144525][ T3978] FAT-fs (loop4): Can't find a valid FAT filesystem 09:19:23 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x19, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d4", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 130.171189][ T3977] FAT-fs (loop5): bogus number of reserved sectors [ 130.177758][ T3977] FAT-fs (loop5): Can't find a valid FAT filesystem [ 130.184184][ T3975] FAT-fs (loop3): invalid media value (0x00) [ 130.190540][ T3975] FAT-fs (loop3): Can't find a valid FAT filesystem [ 130.197397][ T3981] FAT-fs (loop2): bogus number of reserved sectors [ 130.203947][ T3981] FAT-fs (loop2): Can't find a valid FAT filesystem 09:19:23 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1d, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f390", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000000000000500000000000000050000000000000000000080002400000000000000080000000000000000040000020000000800000000000000ffffffffffffffff9a01000000000000ff0700000000090000000000000009000000000000000400000000000040000000ef70a888d8933d210000a815ff8c4bdec553660100be00335113328bec52ef522ced03b400663b7c4bcde1cc40282b268782958c400906bf571e9cb0d711c4b339e2e881635422337ded64158a16f79493910e6c4b1d85cb9c9c8a1edc79084897e671d08c6dcc1371b4c3a1bee4d9284ce529ee2154938b8e2cdb7d656c8857fcf363b87299d82753efd3b2b4493b7809fbeac2"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:23 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1d, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f390", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:23 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1d, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f390", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:23 executing program 0: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:23 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 130.435134][ T3992] loop5: detected capacity change from 0 to 262160 [ 130.442507][ T3994] loop0: detected capacity change from 0 to 262160 09:19:23 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1f, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf1", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000000000000500000000000000050000000000000000000080002400000000000000080000000000000000040000020000000800000000000000ffffffffffffffff9a01000000000000ff0700000000090000000000000009000000000000000400000000000040000000ef70a888d8933d210000a815ff8c4bdec553660100be00335113328bec52ef522ced03b400663b7c4bcde1cc40282b268782958c400906bf571e9cb0d711c4b339e2e881635422337ded64158a16f79493910e6c4b1d85cb9c9c8a1edc79084897e671d08c6dcc1371b4c3a1bee4d9284ce529ee2154938b8e2cdb7d656c8857fcf363b87299d82753efd3b2b4493b7809fbeac2"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 130.485171][ T3992] FAT-fs (loop5): bogus number of reserved sectors [ 130.491832][ T3992] FAT-fs (loop5): Can't find a valid FAT filesystem [ 130.493095][ T3994] FAT-fs (loop0): bogus number of reserved sectors [ 130.504971][ T3994] FAT-fs (loop0): Can't find a valid FAT filesystem 09:19:24 executing program 2: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) socket(0x2, 0x6, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:24 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f8", 0x16}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:24 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1f, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf1", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000000000000500000000000000050000000000000000000080002400000000000000080000000000000000040000020000000800000000000000ffffffffffffffff9a01000000000000ff0700000000090000000000000009000000000000000400000000000040000000ef70a888d8933d210000a815ff8c4bdec553660100be00335113328bec52ef522ced03b400663b7c4bcde1cc40282b268782958c400906bf571e9cb0d711c4b339e2e881635422337ded64158a16f79493910e6c4b1d85cb9c9c8a1edc79084897e671d08c6dcc1371b4c3a1bee4d9284ce529ee2154938b8e2cdb7d656c8857fcf363b87299d82753efd3b2b4493b7809fbeac2"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:24 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400", 0xc}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:24 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) socket(0x2, 0x6, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 130.900440][ T4002] loop3: detected capacity change from 0 to 262160 [ 130.908379][ T4003] loop5: detected capacity change from 0 to 262160 [ 130.915423][ T4005] FAT-fs (loop4): bogus number of reserved sectors [ 130.921970][ T4005] FAT-fs (loop4): Can't find a valid FAT filesystem [ 130.924056][ T4007] FAT-fs (loop2): bogus number of reserved sectors [ 130.935074][ T4007] FAT-fs (loop2): Can't find a valid FAT filesystem [ 130.943207][ T4002] FAT-fs (loop3): bogus number of FAT sectors 09:19:24 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1f, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf1", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 130.949293][ T4002] FAT-fs (loop3): Can't find a valid FAT filesystem 09:19:24 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x20, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 130.988364][ T4003] FAT-fs (loop5): bogus number of reserved sectors [ 130.994919][ T4003] FAT-fs (loop5): Can't find a valid FAT filesystem 09:19:24 executing program 0: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{0x0}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:24 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x20, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:24 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x20, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12d", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 131.109283][ T4014] loop0: detected capacity change from 0 to 262160 [ 131.139944][ T4014] FAT-fs (loop0): bogus number of reserved sectors [ 131.146515][ T4014] FAT-fs (loop0): Can't find a valid FAT filesystem 09:19:24 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:24 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f8", 0x16}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 131.282027][ T4022] loop3: detected capacity change from 0 to 262160 [ 131.301236][ C0] scsi_io_completion_action: 12 callbacks suppressed [ 131.301263][ C0] sd 0:0:1:0: [sda] tag#83 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 131.310974][ T4022] FAT-fs (loop3): bogus number of FAT sectors [ 131.318174][ C0] sd 0:0:1:0: [sda] tag#83 CDB: opcode=0xe5 (vendor) [ 131.324217][ T4022] FAT-fs (loop3): Can't find a valid FAT filesystem [ 131.337470][ C0] sd 0:0:1:0: [sda] tag#83 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 131.346898][ C0] sd 0:0:1:0: [sda] tag#83 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 131.356291][ C0] sd 0:0:1:0: [sda] tag#83 CDB[20]: ba 09:19:24 executing program 2: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:24 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400", 0xc}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:24 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:24 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f8", 0x16}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 131.668386][ C1] sd 0:0:1:0: [sda] tag#102 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 131.678698][ C1] sd 0:0:1:0: [sda] tag#102 CDB: opcode=0xe5 (vendor) [ 131.682864][ T4030] loop2: detected capacity change from 0 to 262160 [ 131.685483][ C1] sd 0:0:1:0: [sda] tag#102 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 131.701463][ C1] sd 0:0:1:0: [sda] tag#102 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 131.710919][ C1] sd 0:0:1:0: [sda] tag#102 CDB[20]: ba 09:19:25 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) socket(0x2, 0x6, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:25 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 131.717631][ T4030] FAT-fs (loop2): bogus number of reserved sectors [ 131.718372][ T4028] loop5: detected capacity change from 0 to 262160 [ 131.724182][ T4030] FAT-fs (loop2): Can't find a valid FAT filesystem [ 131.737597][ T4031] loop3: detected capacity change from 0 to 262160 [ 131.764733][ C0] sd 0:0:1:0: [sda] tag#105 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 131.765816][ T4034] FAT-fs (loop4): bogus number of reserved sectors [ 131.775013][ C0] sd 0:0:1:0: [sda] tag#105 CDB: opcode=0xe5 (vendor) [ 131.781494][ T4034] FAT-fs (loop4): Can't find a valid FAT filesystem [ 131.788242][ C0] sd 0:0:1:0: [sda] tag#105 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 131.804254][ C0] sd 0:0:1:0: [sda] tag#105 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d 09:19:25 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0), 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 131.808417][ T4028] FAT-fs (loop5): bogus number of reserved sectors [ 131.813732][ C0] sd 0:0:1:0: [sda] tag#105 CDB[20]: ba [ 131.820218][ T4028] FAT-fs (loop5): Can't find a valid FAT filesystem [ 131.833791][ T24] kauditd_printk_skb: 3 callbacks suppressed [ 131.833802][ T24] audit: type=1400 audit(1647681565.153:154): avc: denied { mounton } for pid=4027 comm="syz-executor.3" path="/root/syzkaller-testdir3510566840/syzkaller.vZfRpY/82/bus" dev="sda1" ino=1187 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=file permissive=1 09:19:25 executing program 0: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{0x0}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:25 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0), 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 131.901166][ C0] sd 0:0:1:0: [sda] tag#76 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 131.911389][ C0] sd 0:0:1:0: [sda] tag#76 CDB: opcode=0xe5 (vendor) [ 131.918066][ C0] sd 0:0:1:0: [sda] tag#76 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 131.927464][ C0] sd 0:0:1:0: [sda] tag#76 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 131.936849][ C0] sd 0:0:1:0: [sda] tag#76 CDB[20]: ba [ 131.981082][ T4044] loop0: detected capacity change from 0 to 262160 [ 131.983505][ C0] sd 0:0:1:0: [sda] tag#76 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 131.997773][ C0] sd 0:0:1:0: [sda] tag#76 CDB: opcode=0xe5 (vendor) [ 132.004477][ C0] sd 0:0:1:0: [sda] tag#76 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 132.013200][ T4031] FAT-fs (loop3): bogus number of FAT sectors [ 132.013857][ C0] sd 0:0:1:0: [sda] tag#76 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d 09:19:25 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0), 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 132.013878][ C0] sd 0:0:1:0: [sda] tag#76 CDB[20]: ba [ 132.019923][ T4031] FAT-fs (loop3): Can't find a valid FAT filesystem [ 132.050655][ T4044] FAT-fs (loop0): bogus number of reserved sectors [ 132.057231][ T4044] FAT-fs (loop0): Can't find a valid FAT filesystem 09:19:25 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x0) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 132.101505][ C0] sd 0:0:1:0: [sda] tag#106 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 132.111805][ C0] sd 0:0:1:0: [sda] tag#106 CDB: opcode=0xe5 (vendor) [ 132.118596][ C0] sd 0:0:1:0: [sda] tag#106 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 132.128085][ C0] sd 0:0:1:0: [sda] tag#106 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 132.137557][ C0] sd 0:0:1:0: [sda] tag#106 CDB[20]: ba 09:19:25 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400", 0xc}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 132.193008][ C0] sd 0:0:1:0: [sda] tag#122 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 132.203293][ C0] sd 0:0:1:0: [sda] tag#122 CDB: opcode=0xe5 (vendor) [ 132.210062][ C0] sd 0:0:1:0: [sda] tag#122 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 132.219549][ C0] sd 0:0:1:0: [sda] tag#122 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 132.229021][ C0] sd 0:0:1:0: [sda] tag#122 CDB[20]: ba [ 132.253505][ T4053] loop5: detected capacity change from 0 to 262160 [ 132.270156][ T4053] FAT-fs (loop5): bogus number of reserved sectors [ 132.276721][ T4053] FAT-fs (loop5): Can't find a valid FAT filesystem 09:19:25 executing program 2: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:25 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:25 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x0) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:25 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240", 0x12}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 132.552588][ T4059] loop3: detected capacity change from 0 to 262160 [ 132.552762][ T4058] loop5: detected capacity change from 0 to 262160 [ 132.565559][ T4061] loop2: detected capacity change from 0 to 262160 [ 132.576366][ C1] sd 0:0:1:0: [sda] tag#87 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 132.586569][ C1] sd 0:0:1:0: [sda] tag#87 CDB: opcode=0xe5 (vendor) [ 132.593283][ C1] sd 0:0:1:0: [sda] tag#87 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c 09:19:25 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) socket(0x2, 0x6, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:25 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x0) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 132.602690][ C1] sd 0:0:1:0: [sda] tag#87 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 132.612088][ C1] sd 0:0:1:0: [sda] tag#87 CDB[20]: ba [ 132.630949][ T4061] FAT-fs (loop2): bogus number of reserved sectors [ 132.637524][ T4061] FAT-fs (loop2): Can't find a valid FAT filesystem [ 132.660628][ T4058] FAT-fs (loop5): invalid media value (0x00) [ 132.666652][ T4058] FAT-fs (loop5): Can't find a valid FAT filesystem [ 132.669422][ T4066] FAT-fs (loop4): bogus number of reserved sectors [ 132.680185][ T4066] FAT-fs (loop4): Can't find a valid FAT filesystem 09:19:26 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 132.708058][ C1] sd 0:0:1:0: [sda] tag#108 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 132.718355][ C1] sd 0:0:1:0: [sda] tag#108 CDB: opcode=0xe5 (vendor) [ 132.725151][ C1] sd 0:0:1:0: [sda] tag#108 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 132.734636][ C1] sd 0:0:1:0: [sda] tag#108 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 132.744110][ C1] sd 0:0:1:0: [sda] tag#108 CDB[20]: ba 09:19:26 executing program 0: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{0x0}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:26 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000000000000500000000000000050000000000000000000080002400000000000000080000000000000000040000020000000800000000000000ffffffffffffffff9a01000000000000ff0700000000090000000000000009000000000000000400000000000040000000ef70a888d8933d210000a815ff8c4bdec553660100be00335113328bec52ef522ced03b400663b7c4bcde1cc40282b268782958c400906bf571e9cb0d711c4b339e2e881635422337ded64158a16f79493910e6c4b1d85cb9c9c8a1edc79084897e671d08c6dcc1371b4c3a1bee4d9284ce529ee2154938b8e2cdb7d656c8857fcf363b87299d82753efd3b2b4493b7809fbeac2"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 132.818544][ T4069] loop3: detected capacity change from 0 to 262160 [ 132.840356][ C0] sd 0:0:1:0: [sda] tag#91 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 132.846140][ T4073] loop0: detected capacity change from 0 to 262160 [ 132.850556][ C0] sd 0:0:1:0: [sda] tag#91 CDB: opcode=0xe5 (vendor) 09:19:26 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 132.863711][ C0] sd 0:0:1:0: [sda] tag#91 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 132.873103][ C0] sd 0:0:1:0: [sda] tag#91 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 132.882483][ C0] sd 0:0:1:0: [sda] tag#91 CDB[20]: ba [ 132.883082][ T4073] FAT-fs (loop0): bogus number of reserved sectors [ 132.894518][ T4073] FAT-fs (loop0): Can't find a valid FAT filesystem 09:19:26 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:26 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 133.215685][ T3243] I/O error, dev loop3, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 09:19:26 executing program 2: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) socket(0x2, 0x6, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:26 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240", 0x12}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:26 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:26 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:26 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) socket(0x2, 0x6, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 133.412741][ T4089] loop4: detected capacity change from 0 to 262160 [ 133.413481][ T4088] loop3: detected capacity change from 0 to 262160 [ 133.429479][ T4089] FAT-fs (loop4): bogus number of reserved sectors [ 133.429569][ T4090] loop5: detected capacity change from 0 to 262160 [ 133.436033][ T4089] FAT-fs (loop4): Can't find a valid FAT filesystem [ 133.449290][ T4083] FAT-fs (loop2): bogus number of reserved sectors [ 133.455911][ T4083] FAT-fs (loop2): Can't find a valid FAT filesystem 09:19:26 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:26 executing program 0: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 133.475122][ T4090] FAT-fs (loop5): invalid media value (0x00) [ 133.481124][ T4090] FAT-fs (loop5): Can't find a valid FAT filesystem [ 133.539890][ T4095] loop0: detected capacity change from 0 to 262160 09:19:26 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x0, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:26 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x0, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 133.585145][ T4095] FAT-fs (loop0): bogus number of reserved sectors [ 133.591878][ T4095] FAT-fs (loop0): Can't find a valid FAT filesystem 09:19:27 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x0, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000000000000500000000000000050000000000000000000080002400000000000000080000000000000000040000020000000800000000000000ffffffffffffffff9a01000000000000ff0700000000090000000000000009000000000000000400000000000040000000ef70a888d8933d210000a815ff8c4bdec553660100be00335113328bec52ef522ced03b400663b7c4bcde1cc40282b268782958c400906bf571e9cb0d711c4b339e2e881635422337ded64158a16f79493910e6c4b1d85cb9c9c8a1edc79084897e671d08c6dcc1371b4c3a1bee4d9284ce529ee2154938b8e2cdb7d656c8857fcf363b87299d82753efd3b2b4493b7809fbeac2"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:27 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240", 0x12}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:27 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, 0x0}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:27 executing program 2: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{0x0}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:27 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:27 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, 0x0}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 133.764393][ T4104] loop5: detected capacity change from 0 to 262160 [ 133.788407][ T4104] FAT-fs (loop5): invalid media value (0x00) [ 133.794446][ T4104] FAT-fs (loop5): Can't find a valid FAT filesystem 09:19:27 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, 0x0}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 133.843662][ T4111] loop3: detected capacity change from 0 to 262160 [ 133.850687][ T4108] loop2: detected capacity change from 0 to 262160 [ 133.937602][ T4108] FAT-fs (loop2): bogus number of reserved sectors [ 133.944216][ T4108] FAT-fs (loop2): Can't find a valid FAT filesystem 09:19:27 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) socket(0x2, 0x6, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:27 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 134.224613][ T4118] loop4: detected capacity change from 0 to 262160 [ 134.233070][ T4118] FAT-fs (loop4): bogus number of reserved sectors [ 134.239585][ T4118] FAT-fs (loop4): Can't find a valid FAT filesystem 09:19:27 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080", 0x15}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:27 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:27 executing program 0: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:27 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 134.295665][ T4120] loop5: detected capacity change from 0 to 262160 [ 134.312964][ T4124] loop3: detected capacity change from 0 to 262160 [ 134.315584][ T4126] loop0: detected capacity change from 0 to 262160 09:19:27 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 134.362781][ T4120] FAT-fs (loop5): invalid media value (0x00) [ 134.368796][ T4120] FAT-fs (loop5): Can't find a valid FAT filesystem [ 134.368876][ T4126] FAT-fs (loop0): bogus number of reserved sectors [ 134.381907][ T4126] FAT-fs (loop0): Can't find a valid FAT filesystem 09:19:27 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:28 executing program 2: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:28 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:28 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:28 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080", 0x15}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 134.695134][ T4135] loop3: detected capacity change from 0 to 262160 [ 134.704962][ T4138] loop5: detected capacity change from 0 to 262160 [ 134.733248][ T4138] FAT-fs (loop5): invalid media value (0x00) [ 134.739333][ T4138] FAT-fs (loop5): Can't find a valid FAT filesystem 09:19:28 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) socket(0x2, 0x6, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:28 executing program 2: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:28 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 134.882261][ T4143] loop2: detected capacity change from 0 to 262160 [ 134.898505][ T4143] FAT-fs (loop2): bogus number of reserved sectors [ 134.905165][ T4143] FAT-fs (loop2): Can't find a valid FAT filesystem 09:19:28 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000000000000500000000000000050000000000000000000080002400000000000000080000000000000000040000020000000800000000000000ffffffffffffffff9a01000000000000ff0700000000090000000000000009000000000000000400000000000040000000ef70a888d8933d210000a815ff8c4bdec55366"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 134.927141][ T4145] loop4: detected capacity change from 0 to 262160 [ 134.952416][ T4145] FAT-fs (loop4): bogus number of reserved sectors [ 134.958961][ T4145] FAT-fs (loop4): Can't find a valid FAT filesystem 09:19:28 executing program 0: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:28 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:28 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080", 0x15}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:28 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000000000000500000000000000050000000000000000000080002400000000000000080000000000000000040000020000000800000000000000ffffffffffffffff9a01000000000000ff0700000000090000000000000009000000000000000400000000000040000000ef70a888d8933d210000a815ff8c4bdec55366"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:28 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000000000000500000000000000050000000000000000000080002400000000000000080000000000000000040000020000000800000000000000ffffffffffffffff9a01000000000000ff0700000000090000000000000009000000000000000400000000000040000000ef70a888d8933d210000a815ff8c4bdec55366"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 135.097879][ T4151] loop5: detected capacity change from 0 to 262160 [ 135.105003][ T4154] loop3: detected capacity change from 0 to 262160 [ 135.109392][ T4155] loop0: detected capacity change from 0 to 262160 [ 135.125494][ T4151] FAT-fs (loop5): invalid media value (0x00) [ 135.131540][ T4151] FAT-fs (loop5): Can't find a valid FAT filesystem 09:19:28 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000000000000500000000000000050000000000000000000080002400000000000000080000000000000000040000020000000800000000000000ffffffffffffffff9a01000000000000ff0700000000090000000000000009000000000000000400000000000040000000ef70a888d8933d210000a815ff8c4bdec553660100be00335113328bec52ef522ced03b400663b7c4bcde1cc40282b268782958c400906bf571e9cb0d711c4b339e2e881635422337ded64158a16f79493910e6c"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 135.191048][ T4155] FAT-fs (loop0): bogus number of reserved sectors [ 135.197616][ T4155] FAT-fs (loop0): Can't find a valid FAT filesystem 09:19:28 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000000000000500000000000000050000000000000000000080002400000000000000080000000000000000040000020000000800000000000000ffffffffffffffff9a01000000000000ff0700000000090000000000000009000000000000000400000000000040000000ef70a888d8933d210000a815ff8c4bdec553660100be00335113328bec52ef522ced03b400663b7c4bcde1cc40282b268782958c400906bf571e9cb0d711c4b339e2e881635422337ded64158a16f79493910e6c"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:28 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(0x0, 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 135.438569][ T4165] loop3: detected capacity change from 0 to 262160 09:19:28 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{0x0}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) socket(0x2, 0x6, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:28 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000000000000500000000000000050000000000000000000080002400000000000000080000000000000000040000020000000800000000000000ffffffffffffffff9a01000000000000ff0700000000090000000000000009000000000000000400000000000040000000ef70a888d8933d210000a815ff8c4bdec553660100be00335113328bec52ef522ced03b400663b7c4bcde1cc40282b268782958c400906bf571e9cb0d711c4b339e2e881635422337ded64158a16f79493910e6c"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:28 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f8", 0x16}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:28 executing program 2: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 135.652873][ T4170] loop5: detected capacity change from 0 to 262160 [ 135.655515][ T4171] loop4: detected capacity change from 0 to 262160 [ 135.668210][ T4173] loop2: detected capacity change from 0 to 262160 [ 135.679161][ T4171] FAT-fs (loop4): bogus number of reserved sectors [ 135.685810][ T4171] FAT-fs (loop4): Can't find a valid FAT filesystem [ 135.692421][ T4170] FAT-fs (loop5): bogus number of FAT sectors [ 135.698478][ T4170] FAT-fs (loop5): Can't find a valid FAT filesystem [ 135.705794][ T4173] FAT-fs (loop2): bogus number of reserved sectors [ 135.712407][ T4173] FAT-fs (loop2): Can't find a valid FAT filesystem 09:19:29 executing program 0: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400", 0xc}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:29 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(0x0, 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:29 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000000000000500000000000000050000000000000000000080002400000000000000080000000000000000040000020000000800000000000000ffffffffffffffff9a01000000000000ff0700000000090000000000000009000000000000000400000000000040000000ef70a888d8933d210000a815ff8c4bdec553660100be00335113328bec52ef522ced03b400663b7c4bcde1cc40282b268782958c400906bf571e9cb0d711c4b339e2e881635422337ded64158a16f79493910e6c4b1d85cb9c9c8a1edc79084897e671d08c6dcc1371b4c3a1bee4d9284ce529ee"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 135.798816][ T4179] loop3: detected capacity change from 0 to 262160 [ 135.804109][ T4181] loop0: detected capacity change from 0 to 262160 09:19:29 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(0x0, 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:29 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000000000000500000000000000050000000000000000000080002400000000000000080000000000000000040000020000000800000000000000ffffffffffffffff9a01000000000000ff0700000000090000000000000009000000000000000400000000000040000000ef70a888d8933d210000a815ff8c4bdec553660100be00335113328bec52ef522ced03b400663b7c4bcde1cc40282b268782958c400906bf571e9cb0d711c4b339e2e881635422337ded64158a16f79493910e6c4b1d85cb9c9c8a1edc79084897e671d08c6dcc1371b4c3a1bee4d9284ce529ee"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 135.857724][ T4181] FAT-fs (loop0): bogus number of reserved sectors [ 135.864294][ T4181] FAT-fs (loop0): Can't find a valid FAT filesystem 09:19:29 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000000000000500000000000000050000000000000000000080002400000000000000080000000000000000040000020000000800000000000000ffffffffffffffff9a01000000000000ff0700000000090000000000000009000000000000000400000000000040000000ef70a888d8933d210000a815ff8c4bdec553660100be00335113328bec52ef522ced03b400663b7c4bcde1cc40282b268782958c400906bf571e9cb0d711c4b339e2e881635422337ded64158a16f79493910e6c4b1d85cb9c9c8a1edc79084897e671d08c6dcc1371b4c3a1bee4d9284ce529ee"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:29 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f8", 0x16}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 135.923223][ T4183] loop3: detected capacity change from 0 to 262160 09:19:29 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 136.009499][ T4190] loop5: detected capacity change from 0 to 262160 [ 136.042774][ T4191] loop3: detected capacity change from 0 to 262160 09:19:29 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{0x0}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) socket(0x2, 0x6, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:29 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000000000000500000000000000050000000000000000000080002400000000000000080000000000000000040000020000000800000000000000ffffffffffffffff9a01000000000000ff0700000000090000000000000009000000000000000400000000000040000000ef70a888d8933d210000a815ff8c4bdec553660100be00335113328bec52ef522ced03b400663b7c4bcde1cc40282b268782958c400906bf571e9cb0d711c4b339e2e881635422337ded64158a16f79493910e6c4b1d85cb9c9c8a1edc79084897e671d08c6dcc1371b4c3a1bee4d9284ce529ee2154938b8e2cdb7d656c8857fcf363b8"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:29 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 136.055165][ T4190] FAT-fs (loop5): bogus number of FAT sectors [ 136.061262][ T4190] FAT-fs (loop5): Can't find a valid FAT filesystem [ 136.115476][ T4197] loop4: detected capacity change from 0 to 262160 [ 136.131599][ T4197] FAT-fs (loop4): bogus number of reserved sectors [ 136.138152][ T4197] FAT-fs (loop4): Can't find a valid FAT filesystem [ 136.153273][ T4198] loop3: detected capacity change from 0 to 262160 09:19:29 executing program 2: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:29 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000000000000500000000000000050000000000000000000080002400000000000000080000000000000000040000020000000800000000000000ffffffffffffffff9a01000000000000ff0700000000090000000000000009000000000000000400000000000040000000ef70a888d8933d210000a815ff8c4bdec553660100be00335113328bec52ef522ced03b400663b7c4bcde1cc40282b268782958c400906bf571e9cb0d711c4b339e2e881635422337ded64158a16f79493910e6c4b1d85cb9c9c8a1edc79084897e671d08c6dcc1371b4c3a1bee4d9284ce529ee2154938b8e2cdb7d656c8857fcf363b8"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:29 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:29 executing program 0: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400", 0xc}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:29 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f8", 0x16}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 136.482398][ T4200] loop2: detected capacity change from 0 to 262160 [ 136.505901][ T4206] loop5: detected capacity change from 0 to 262160 [ 136.510353][ T4205] loop3: detected capacity change from 0 to 262160 [ 136.513116][ C1] scsi_io_completion_action: 28 callbacks suppressed 09:19:29 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 136.513150][ C1] sd 0:0:1:0: [sda] tag#103 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 136.535899][ C1] sd 0:0:1:0: [sda] tag#103 CDB: opcode=0xe5 (vendor) [ 136.542707][ C1] sd 0:0:1:0: [sda] tag#103 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 136.549313][ T4200] FAT-fs (loop2): bogus number of reserved sectors [ 136.552184][ C1] sd 0:0:1:0: [sda] tag#103 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 136.552205][ C1] sd 0:0:1:0: [sda] tag#103 CDB[20]: ba [ 136.558674][ T4200] FAT-fs (loop2): Can't find a valid FAT filesystem 09:19:29 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000000000000500000000000000050000000000000000000080002400000000000000080000000000000000040000020000000800000000000000ffffffffffffffff9a01000000000000ff0700000000090000000000000009000000000000000400000000000040000000ef70a888d8933d210000a815ff8c4bdec553660100be00335113328bec52ef522ced03b400663b7c4bcde1cc40282b268782958c400906bf571e9cb0d711c4b339e2e881635422337ded64158a16f79493910e6c4b1d85cb9c9c8a1edc79084897e671d08c6dcc1371b4c3a1bee4d9284ce529ee2154938b8e2cdb7d656c8857fcf363b8"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 136.595523][ T4210] loop0: detected capacity change from 0 to 262160 [ 136.606946][ T4206] FAT-fs (loop5): bogus number of FAT sectors [ 136.613082][ T4206] FAT-fs (loop5): Can't find a valid FAT filesystem [ 136.615552][ C0] sd 0:0:1:0: [sda] tag#107 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 136.624528][ T4210] FAT-fs (loop0): bogus number of reserved sectors [ 136.629926][ C0] sd 0:0:1:0: [sda] tag#107 CDB: opcode=0xe5 (vendor) 09:19:30 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000000000000500000000000000050000000000000000000080002400000000000000080000000000000000040000020000000800000000000000ffffffffffffffff9a01000000000000ff0700000000090000000000000009000000000000000400000000000040000000ef70a888d8933d210000a815ff8c4bdec553660100be00335113328bec52ef522ced03b400663b7c4bcde1cc40282b268782958c400906bf571e9cb0d711c4b339e2e881635422337ded64158a16f79493910e6c4b1d85cb9c9c8a1edc79084897e671d08c6dcc1371b4c3a1bee4d9284ce529ee2154938b8e2cdb7d656c8857fcf363b87299d82753efd3b2"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 136.636415][ T4210] FAT-fs (loop0): Can't find a valid FAT filesystem [ 136.643194][ C0] sd 0:0:1:0: [sda] tag#107 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 136.659306][ C0] sd 0:0:1:0: [sda] tag#107 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 136.668821][ C0] sd 0:0:1:0: [sda] tag#107 CDB[20]: ba 09:19:30 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 136.733338][ C0] sd 0:0:1:0: [sda] tag#112 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 136.743640][ C0] sd 0:0:1:0: [sda] tag#112 CDB: opcode=0xe5 (vendor) [ 136.750411][ C0] sd 0:0:1:0: [sda] tag#112 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 136.759912][ C0] sd 0:0:1:0: [sda] tag#112 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 136.769393][ C0] sd 0:0:1:0: [sda] tag#112 CDB[20]: ba [ 136.801987][ T4215] loop3: detected capacity change from 0 to 262160 [ 136.805649][ C0] sd 0:0:1:0: [sda] tag#79 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 136.818696][ C0] sd 0:0:1:0: [sda] tag#79 CDB: opcode=0xe5 (vendor) [ 136.825403][ C0] sd 0:0:1:0: [sda] tag#79 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 136.834793][ C0] sd 0:0:1:0: [sda] tag#79 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 136.844182][ C0] sd 0:0:1:0: [sda] tag#79 CDB[20]: ba 09:19:30 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{0x0}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) socket(0x2, 0x6, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:30 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:30 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 136.966092][ T4225] loop4: detected capacity change from 0 to 262160 [ 136.968678][ T4224] loop3: detected capacity change from 0 to 262160 [ 136.983428][ C1] sd 0:0:1:0: [sda] tag#118 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 136.991109][ T4225] FAT-fs (loop4): bogus number of reserved sectors [ 136.993735][ C1] sd 0:0:1:0: [sda] tag#118 CDB: opcode=0xe5 (vendor) [ 137.000210][ T4225] FAT-fs (loop4): Can't find a valid FAT filesystem [ 137.006967][ C1] sd 0:0:1:0: [sda] tag#118 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 137.006985][ C1] sd 0:0:1:0: [sda] tag#118 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 137.007017][ C1] sd 0:0:1:0: [sda] tag#118 CDB[20]: ba 09:19:30 executing program 2: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000000000000500000000000000050000000000000000000080002400000000000000080000000000000000040000020000000800000000000000ffffffffffffffff9a01000000000000ff0700000000090000000000000009000000000000000400000000000040000000ef70a888d8933d210000a815ff8c4bdec553660100be00335113328bec52ef522ced03b400663b7c4bcde1cc40282b268782958c400906bf571e9cb0d711c4b339e2e881635422337ded64158a16f79493910e6c4b1d85cb9c9c8a1edc79084897e671d08c6dcc1371b4c3a1bee4d9284ce529ee2154938b8e2cdb7d656c8857fcf363b87299d82753efd3b2"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:30 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:30 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 137.347629][ T4230] loop3: detected capacity change from 0 to 262160 [ 137.357686][ C0] sd 0:0:1:0: [sda] tag#99 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 137.358483][ T4229] loop5: detected capacity change from 0 to 262160 [ 137.367890][ C0] sd 0:0:1:0: [sda] tag#99 CDB: opcode=0xe5 (vendor) [ 137.367910][ C0] sd 0:0:1:0: [sda] tag#99 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c 09:19:30 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000000000000500000000000000050000000000000000000080002400000000000000080000000000000000040000020000000800000000000000ffffffffffffffff9a01000000000000ff0700000000090000000000000009000000000000000400000000000040000000ef70a888d8933d210000a815ff8c4bdec553660100be00335113328bec52ef522ced03b400663b7c4bcde1cc40282b268782958c400906bf571e9cb0d711c4b339e2e881635422337ded64158a16f79493910e6c4b1d85cb9c9c8a1edc79084897e671d08c6dcc1371b4c3a1bee4d9284ce529ee2154938b8e2cdb7d656c8857fcf363b8"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:30 executing program 0: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400", 0xc}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:30 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 137.390423][ C0] sd 0:0:1:0: [sda] tag#99 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 137.399816][ C0] sd 0:0:1:0: [sda] tag#99 CDB[20]: ba [ 137.431468][ T4236] loop0: detected capacity change from 0 to 262160 09:19:30 executing program 2: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400", 0xc}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 137.456206][ T4236] FAT-fs (loop0): bogus number of reserved sectors [ 137.462819][ T4236] FAT-fs (loop0): Can't find a valid FAT filesystem [ 137.483550][ C0] sd 0:0:1:0: [sda] tag#102 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 137.493860][ C0] sd 0:0:1:0: [sda] tag#102 CDB: opcode=0xe5 (vendor) 09:19:30 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000000000000500000000000000050000000000000000000080002400000000000000080000000000000000040000020000000800000000000000ffffffffffffffff9a01000000000000ff0700000000090000000000000009000000000000000400000000000040000000ef70a888d8933d210000a815ff8c4bdec553660100be00335113328bec52ef522ced03b400663b7c4bcde1cc40282b268782958c400906bf571e9cb0d711c4b339e2e881635422337ded64158a16f79493910e6c4b1d85cb9c9c8a1edc79084897e671d08c6dcc1371b4c3a1bee4d9284ce529ee2154938b8e2cdb7d656c8857fcf363b8"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 137.497952][ T4242] loop2: detected capacity change from 0 to 262160 [ 137.500621][ C0] sd 0:0:1:0: [sda] tag#102 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 137.500644][ C0] sd 0:0:1:0: [sda] tag#102 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 137.526053][ C0] sd 0:0:1:0: [sda] tag#102 CDB[20]: ba [ 137.562970][ T4238] loop3: detected capacity change from 0 to 262160 [ 137.573385][ C0] sd 0:0:1:0: [sda] tag#80 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 137.583592][ C0] sd 0:0:1:0: [sda] tag#80 CDB: opcode=0xe5 (vendor) [ 137.590276][ C0] sd 0:0:1:0: [sda] tag#80 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 137.599675][ C0] sd 0:0:1:0: [sda] tag#80 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d 09:19:30 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000000000000500000000000000050000000000000000000080002400000000000000080000000000000000040000020000000800000000000000ffffffffffffffff9a01000000000000ff0700000000090000000000000009000000000000000400000000000040000000ef70a888d8933d210000a815ff8c4bdec553660100be00335113328bec52ef522ced03b400663b7c4bcde1cc40282b268782958c400906bf571e9cb0d711c4b339e2e881635422337ded64158a16f79493910e6c4b1d85cb9c9c8a1edc79084897e671d08c6dcc1371b4c3a1bee4d9284ce529ee2154938b8e2cdb7d656c8857fcf363b8"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 137.609063][ C0] sd 0:0:1:0: [sda] tag#80 CDB[20]: ba [ 137.612383][ T4242] FAT-fs (loop2): bogus number of reserved sectors [ 137.621078][ T4242] FAT-fs (loop2): Can't find a valid FAT filesystem [ 137.660570][ C0] sd 0:0:1:0: [sda] tag#123 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 137.670858][ C0] sd 0:0:1:0: [sda] tag#123 CDB: opcode=0xe5 (vendor) [ 137.677657][ C0] sd 0:0:1:0: [sda] tag#123 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 137.687136][ C0] sd 0:0:1:0: [sda] tag#123 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 137.696625][ C0] sd 0:0:1:0: [sda] tag#123 CDB[20]: ba 09:19:31 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) socket(0x2, 0x6, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:31 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:31 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:31 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000000000000500000000000000050000000000000000000080002400000000000000080000000000000000040000020000000800000000000000ffffffffffffffff9a01000000000000ff0700000000090000000000000009000000000000000400000000000040000000ef70a888d8933d210000a815ff8c4bdec553660100be00335113328bec52ef522ced03b400663b7c4bcde1cc40282b268782958c400906bf571e9cb0d711c4b339e2e881635422337ded64158a16f79493910e6c4b1d85cb9c9c8a1edc79084897e671d08c6dcc1371b4c3a1bee4d9284ce529ee2154938b8e2cdb7d656c8857fcf363b87299d827"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 137.775635][ T4253] loop3: detected capacity change from 0 to 262160 [ 137.780240][ T4255] loop4: detected capacity change from 0 to 262160 [ 137.794868][ T4257] loop5: detected capacity change from 0 to 262160 [ 137.803747][ C0] sd 0:0:1:0: [sda] tag#72 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 137.813937][ C0] sd 0:0:1:0: [sda] tag#72 CDB: opcode=0xe5 (vendor) [ 137.820613][ C0] sd 0:0:1:0: [sda] tag#72 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 137.825471][ T4255] FAT-fs (loop4): bogus number of reserved sectors [ 137.830037][ C0] sd 0:0:1:0: [sda] tag#72 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 137.830059][ C0] sd 0:0:1:0: [sda] tag#72 CDB[20]: ba [ 137.838809][ T4255] FAT-fs (loop4): Can't find a valid FAT filesystem 09:19:31 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000000000000500000000000000050000000000000000000080002400000000000000080000000000000000040000020000000800000000000000ffffffffffffffff9a01000000000000ff0700000000090000000000000009000000000000000400000000000040000000ef70a888d8933d210000a815ff8c4bdec553660100be00335113328bec52ef522ced03b400663b7c4bcde1cc40282b268782958c400906bf571e9cb0d711c4b339e2e881635422337ded64158a16f79493910e6c4b1d85cb9c9c8a1edc79084897e671d08c6dcc1371b4c3a1bee4d9284ce529ee2154938b8e2cdb7d656c8857fcf363b87299d827"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:31 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:31 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 137.972055][ T4262] loop3: detected capacity change from 0 to 262160 [ 138.064713][ T4264] loop3: detected capacity change from 0 to 262160 09:19:31 executing program 0: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240", 0x12}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:31 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000000000000500000000000000050000000000000000000080002400000000000000080000000000000000040000020000000800000000000000ffffffffffffffff9a01000000000000ff0700000000090000000000000009000000000000000400000000000040000000ef70a888d8933d210000a815ff8c4bdec553660100be00335113328bec52ef522ced03b400663b7c4bcde1cc40282b268782958c400906bf571e9cb0d711c4b339e2e881635422337ded64158a16f79493910e6c4b1d85cb9c9c8a1edc79084897e671d08c6dcc1371b4c3a1bee4d9284ce529ee2154938b8e2cdb7d656c8857fcf363b87299d827"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 138.283312][ T4268] loop0: detected capacity change from 0 to 262160 [ 138.290849][ T4268] FAT-fs (loop0): invalid media value (0x00) [ 138.296899][ T4268] FAT-fs (loop0): Can't find a valid FAT filesystem 09:19:31 executing program 2: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400", 0xc}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:31 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:31 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 138.361541][ T4270] loop3: detected capacity change from 0 to 262160 [ 138.362791][ T4272] loop5: detected capacity change from 0 to 262160 [ 138.397741][ T4274] loop2: detected capacity change from 0 to 262160 [ 138.432841][ T4274] FAT-fs (loop2): bogus number of reserved sectors [ 138.439449][ T4274] FAT-fs (loop2): Can't find a valid FAT filesystem 09:19:31 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) socket(0x2, 0x6, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:31 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000000000000500000000000000050000000000000000000080002400000000000000080000000000000000040000020000000800000000000000ffffffffffffffff9a01000000000000ff0700000000090000000000000009000000000000000400000000000040000000ef70a888d8933d210000a815ff8c4bdec553660100be00335113328bec52ef522ced03b400663b7c4bcde1cc40282b268782958c400906bf571e9cb0d711c4b339e2e881635422337ded64158a16f79493910e6c4b1d85cb9c9c8a1edc79084897e671d08c6dcc1371b4c3a1bee4d9284ce529ee2154938b8e2cdb7d656c8857fcf363b87299d82753ef"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:31 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:31 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000000000000500000000000000050000000000000000000080002400000000000000080000000000000000040000020000000800000000000000ffffffffffffffff9a01000000000000ff0700000000090000000000000009000000000000000400000000000040000000ef70a888d8933d210000a815ff8c4bdec553660100be00335113328bec52ef522ced03b400663b7c4bcde1cc40282b268782958c400906bf571e9cb0d711c4b339e2e881635422337ded64158a16f79493910e6c4b1d85cb9c9c8a1edc79084897e671d08c6dcc1371b4c3a1bee4d9284ce529ee2154938b8e2cdb7d656c8857fcf363b87299d82753ef"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 138.519163][ T4279] loop4: detected capacity change from 0 to 262160 [ 138.533126][ T4281] loop3: detected capacity change from 0 to 262160 [ 138.543042][ T4279] FAT-fs (loop4): bogus number of reserved sectors [ 138.549617][ T4279] FAT-fs (loop4): Can't find a valid FAT filesystem 09:19:31 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(0x0, 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:31 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000000000000500000000000000050000000000000000000080002400000000000000080000000000000000040000020000000800000000000000ffffffffffffffff9a01000000000000ff0700000000090000000000000009000000000000000400000000000040000000ef70a888d8933d210000a815ff8c4bdec553660100be00335113328bec52ef522ced03b400663b7c4bcde1cc40282b268782958c400906bf571e9cb0d711c4b339e2e881635422337ded64158a16f79493910e6c4b1d85cb9c9c8a1edc79084897e671d08c6dcc1371b4c3a1bee4d9284ce529ee2154938b8e2cdb7d656c8857fcf363b87299d82753ef"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:32 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 138.670452][ T4285] loop3: detected capacity change from 0 to 262160 [ 138.737416][ T1909] I/O error, dev loop5, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 138.756554][ T4289] loop5: detected capacity change from 0 to 262160 [ 138.759296][ T1909] I/O error, dev loop5, sector 262016 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 138.772710][ T1909] Buffer I/O error on dev loop5, logical block 32752, async page read 09:19:32 executing program 0: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240", 0x12}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:32 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(0x0, 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 139.020779][ T4291] loop3: detected capacity change from 0 to 262160 [ 139.036000][ T4293] loop0: detected capacity change from 0 to 262160 [ 139.043556][ T4293] FAT-fs (loop0): invalid media value (0x00) [ 139.049563][ T4293] FAT-fs (loop0): Can't find a valid FAT filesystem 09:19:32 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000000000000500000000000000050000000000000000000080002400000000000000080000000000000000040000020000000800000000000000ffffffffffffffff9a01000000000000ff0700000000090000000000000009000000000000000400000000000040000000ef70a888d8933d210000a815ff8c4bdec553660100be00335113328bec52ef522ced03b400663b7c4bcde1cc40282b268782958c400906bf571e9cb0d711c4b339e2e881635422337ded64158a16f79493910e6c4b1d85cb9c9c8a1edc79084897e671d08c6dcc1371b4c3a1bee4d9284ce529ee2154938b8e2cdb7d656c8857fcf363b87299d82753efd3"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:32 executing program 2: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400", 0xc}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:32 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 139.093799][ T1909] I/O error, dev loop0, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 139.115092][ T3468] I/O error, dev loop5, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 09:19:32 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) socket(0x2, 0x6, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:32 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(0x0, 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 139.169431][ T4297] loop5: detected capacity change from 0 to 262160 [ 139.177613][ T4299] loop2: detected capacity change from 0 to 262160 [ 139.205513][ T4301] loop3: detected capacity change from 0 to 262160 09:19:32 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000000000000500000000000000050000000000000000000080002400000000000000080000000000000000040000020000000800000000000000ffffffffffffffff9a01000000000000ff0700000000090000000000000009000000000000000400000000000040000000ef70a888d8933d210000a815ff8c4bdec553660100be00335113328bec52ef522ced03b400663b7c4bcde1cc40282b268782958c400906bf571e9cb0d711c4b339e2e881635422337ded64158a16f79493910e6c4b1d85cb9c9c8a1edc79084897e671d08c6dcc1371b4c3a1bee4d9284ce529ee2154938b8e2cdb7d656c8857fcf363b87299d82753efd3"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:32 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 139.213740][ T4299] FAT-fs (loop2): bogus number of reserved sectors [ 139.217081][ T4303] loop4: detected capacity change from 0 to 262160 [ 139.220267][ T4299] FAT-fs (loop2): Can't find a valid FAT filesystem 09:19:32 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000000000000500000000000000050000000000000000000080002400000000000000080000000000000000040000020000000800000000000000ffffffffffffffff9a01000000000000ff0700000000090000000000000009000000000000000400000000000040000000ef70a888d8933d210000a815ff8c4bdec553660100be00335113328bec52ef522ced03b400663b7c4bcde1cc40282b268782958c400906bf571e9cb0d711c4b339e2e881635422337ded64158a16f79493910e6c4b1d85cb9c9c8a1edc79084897e671d08c6dcc1371b4c3a1bee4d9284ce529ee2154938b8e2cdb7d656c8857fcf363b87299d82753efd3"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 139.308711][ T4307] loop3: detected capacity change from 0 to 262160 09:19:32 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:32 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 139.395177][ T4303] FAT-fs (loop4): bogus number of reserved sectors [ 139.401726][ T4303] FAT-fs (loop4): Can't find a valid FAT filesystem [ 139.472577][ T4314] loop3: detected capacity change from 0 to 262160 09:19:33 executing program 0: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240", 0x12}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:33 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:33 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 139.765679][ T4318] loop5: detected capacity change from 0 to 262160 [ 139.772409][ T4320] loop0: detected capacity change from 0 to 262160 [ 139.802242][ T4320] FAT-fs (loop0): invalid media value (0x00) [ 139.808313][ T4320] FAT-fs (loop0): Can't find a valid FAT filesystem 09:19:33 executing program 2: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240", 0x12}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:33 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:33 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400", 0xc}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) socket(0x2, 0x6, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:33 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 139.958086][ T4324] loop3: detected capacity change from 0 to 262160 [ 139.981696][ T4326] loop4: detected capacity change from 0 to 262160 [ 139.994441][ T4328] loop2: detected capacity change from 0 to 262160 09:19:33 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:33 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 140.020508][ T4326] FAT-fs (loop4): bogus number of reserved sectors [ 140.027065][ T4326] FAT-fs (loop4): Can't find a valid FAT filesystem [ 140.054719][ T4328] FAT-fs (loop2): invalid media value (0x00) [ 140.060725][ T4328] FAT-fs (loop2): Can't find a valid FAT filesystem 09:19:33 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x10000) [ 140.081216][ T4332] loop5: detected capacity change from 0 to 262160 09:19:33 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 140.159853][ T4335] loop3: detected capacity change from 0 to 262160 09:19:33 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000000000000500000000000000050000000000000000000080002400000000000000080000000000000000040000020000000800000000000000ffffffffffffffff9a01000000000000ff0700000000090000000000000009000000000000000400000000000040000000ef70a888d8933d210000a815ff8c4bdec553660100be00335113328bec52ef522ced03b400663b7c4bcde1cc40282b268782958c400906bf571e9cb0d711c4b339e2e881635422337ded64158a16f79493910e6c4b1d85cb9c9c8a1edc79084897e671d08c6dcc1371b4c3a1bee4d9284ce529ee2154938b8e2cdb7d656c8857fcf363b87299d82753efd3b2"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001a00)={0x53, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:33 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x10000) 09:19:33 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000000000000500000000000000050000000000000000000080002400000000000000080000000000000000040000020000000800000000000000ffffffffffffffff9a01000000000000ff0700000000090000000000000009000000000000000400000000000040000000ef70a888d8933d210000a815ff8c4bdec553660100be00335113328bec52ef522ced03b400663b7c4bcde1cc40282b268782958c400906bf571e9cb0d711c4b339e2e881635422337ded64158a16f79493910e6c4b1d85cb9c9c8a1edc79084897e671d08c6dcc1371b4c3a1bee4d9284ce529ee2154938b8e2cdb7d656c8857fcf363b87299d82753efd3b2"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:33 executing program 0: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080", 0x15}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 140.491339][ T4342] loop3: detected capacity change from 0 to 262160 [ 140.528845][ T4345] loop0: detected capacity change from 0 to 262160 [ 140.545763][ T4345] FAT-fs (loop0): invalid media value (0x00) [ 140.551876][ T4345] FAT-fs (loop0): Can't find a valid FAT filesystem 09:19:33 executing program 2: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400", 0xc}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) socket(0x2, 0x6, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:33 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(0x0, 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:33 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x10000) 09:19:33 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:33 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400", 0xc}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) socket(0x2, 0x6, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:34 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x10000) [ 140.677000][ T4349] loop5: detected capacity change from 0 to 262160 [ 140.679690][ T4351] loop3: detected capacity change from 0 to 262160 [ 140.698231][ T4353] loop4: detected capacity change from 0 to 262160 09:19:34 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(0x0, 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:34 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 140.756978][ T4355] loop2: detected capacity change from 0 to 262160 [ 140.774280][ T4353] FAT-fs (loop4): bogus number of reserved sectors [ 140.780826][ T4353] FAT-fs (loop4): Can't find a valid FAT filesystem 09:19:34 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000000000000500000000000000050000000000000000000080002400000000000000080000000000000000040000020000000800000000000000ffffffffffffffff9a01000000000000ff0700000000090000000000000009000000000000000400000000000040000000ef70a888d8933d210000a815ff8c4bdec553660100be00335113328bec52ef522ced03b400663b7c4bcde1cc40282b268782958c400906bf571e9cb0d711c4b339e2e881635422337ded64158a16f79493910e6c4b1d85cb9c9c8a1edc79084897e671d08c6dcc1371b4c3a1bee4d9284ce529ee2154938b8e2cdb7d656c8857fcf363b87299d82753efd3b2"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x0, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:34 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x10000) [ 140.808901][ T4355] FAT-fs (loop2): bogus number of reserved sectors [ 140.815554][ T4355] FAT-fs (loop2): Can't find a valid FAT filesystem [ 140.824550][ T4357] loop3: detected capacity change from 0 to 262160 [ 140.839833][ T4362] loop5: detected capacity change from 0 to 262160 09:19:34 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x0, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 140.922007][ T4367] loop3: detected capacity change from 0 to 262160 09:19:34 executing program 0: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080", 0x15}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 141.244228][ T4371] loop0: detected capacity change from 0 to 262160 [ 141.252324][ T4371] FAT-fs (loop0): invalid media value (0x00) [ 141.258322][ T4371] FAT-fs (loop0): Can't find a valid FAT filesystem 09:19:34 executing program 2: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400", 0xc}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) socket(0x2, 0x6, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:34 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(0x0, 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:34 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x10000) 09:19:34 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x0, 0x5, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:34 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400", 0xc}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) socket(0x2, 0x6, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:34 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x0) [ 141.413363][ T4378] loop4: detected capacity change from 0 to 262160 [ 141.414648][ T4379] loop5: detected capacity change from 0 to 262160 [ 141.427142][ T4378] FAT-fs (loop4): bogus number of reserved sectors [ 141.432467][ T4380] loop3: detected capacity change from 0 to 262160 [ 141.433668][ T4378] FAT-fs (loop4): Can't find a valid FAT filesystem 09:19:34 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x0, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 141.463578][ T4381] loop2: detected capacity change from 0 to 262160 [ 141.480072][ T4381] FAT-fs (loop2): bogus number of reserved sectors [ 141.486793][ T4381] FAT-fs (loop2): Can't find a valid FAT filesystem 09:19:34 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 141.532941][ T4383] loop3: detected capacity change from 0 to 262160 [ 141.567425][ C1] scsi_io_completion_action: 20 callbacks suppressed 09:19:34 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x0) [ 141.567464][ C1] sd 0:0:1:0: [sda] tag#74 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 141.584355][ C1] sd 0:0:1:0: [sda] tag#74 CDB: opcode=0xe5 (vendor) [ 141.591033][ C1] sd 0:0:1:0: [sda] tag#74 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 141.600436][ C1] sd 0:0:1:0: [sda] tag#74 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 141.609803][ C1] sd 0:0:1:0: [sda] tag#74 CDB[20]: ba [ 141.624464][ T4388] loop5: detected capacity change from 0 to 262160 09:19:35 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x0, 0x28, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 141.665836][ T4390] loop3: detected capacity change from 0 to 262160 [ 141.702715][ C0] sd 0:0:1:0: [sda] tag#65 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s 09:19:35 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 141.712939][ C0] sd 0:0:1:0: [sda] tag#65 CDB: opcode=0xe5 (vendor) [ 141.719621][ C0] sd 0:0:1:0: [sda] tag#65 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 141.729028][ C0] sd 0:0:1:0: [sda] tag#65 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 141.738428][ C0] sd 0:0:1:0: [sda] tag#65 CDB[20]: ba [ 141.801092][ T4395] loop5: detected capacity change from 0 to 262160 09:19:35 executing program 0: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080", 0x15}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 142.001176][ T4397] loop0: detected capacity change from 0 to 262160 [ 142.029498][ T4397] FAT-fs (loop0): invalid media value (0x00) [ 142.035539][ T4397] FAT-fs (loop0): Can't find a valid FAT filesystem 09:19:35 executing program 2: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000000000000500000000000000050000000000000000000080002400000000000000080000000000000000040000020000000800000000000000ffffffffffffffff9a01000000000000ff0700000000090000000000000009000000000000000400000000000040000000ef70a888d8933d210000a815ff8c4bdec553660100be00335113328bec52ef522ced03b400663b7c4bcde1cc40282b268782958c400906bf571e9cb0d711c4b339e2e881635422337ded64158a16f79493910e6c4b1d85cb9c9c8a1edc79084897e671d08c6dcc1371b4c3a1bee4d9284ce529ee2154938b8e2cdb7d656c8857fcf363b87299d82753efd3b2"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x0, 0x28, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:35 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x0) 09:19:35 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x0, 0x28, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:35 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:35 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240", 0x12}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) socket(0x2, 0x6, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 142.177581][ C1] sd 0:0:1:0: [sda] tag#67 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 142.180441][ T4404] loop3: detected capacity change from 0 to 262160 [ 142.187774][ C1] sd 0:0:1:0: [sda] tag#67 CDB: opcode=0xe5 (vendor) [ 142.187794][ C1] sd 0:0:1:0: [sda] tag#67 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 142.196345][ T4405] loop5: detected capacity change from 0 to 262160 [ 142.200946][ C1] sd 0:0:1:0: [sda] tag#67 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d 09:19:35 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240", 0x12}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:35 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 142.200967][ C1] sd 0:0:1:0: [sda] tag#67 CDB[20]: ba [ 142.232095][ T4403] loop4: detected capacity change from 0 to 262160 [ 142.242992][ T4403] FAT-fs (loop4): invalid media value (0x00) [ 142.248982][ T4403] FAT-fs (loop4): Can't find a valid FAT filesystem [ 142.259581][ C0] sd 0:0:1:0: [sda] tag#79 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 142.269773][ C0] sd 0:0:1:0: [sda] tag#79 CDB: opcode=0xe5 (vendor) 09:19:35 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x0, 0x28, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 142.276480][ C0] sd 0:0:1:0: [sda] tag#79 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 142.277693][ C1] sd 0:0:1:0: [sda] tag#83 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 142.285856][ C0] sd 0:0:1:0: [sda] tag#79 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 142.295999][ C1] sd 0:0:1:0: [sda] tag#83 CDB: opcode=0xe5 (vendor) [ 142.305337][ C0] sd 0:0:1:0: [sda] tag#79 CDB[20]: ba [ 142.311994][ C1] sd 0:0:1:0: [sda] tag#83 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c 09:19:35 executing program 2: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) socket(0x2, 0x6, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 142.326813][ C1] sd 0:0:1:0: [sda] tag#83 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 142.336207][ C1] sd 0:0:1:0: [sda] tag#83 CDB[20]: ba [ 142.353168][ T4416] loop3: detected capacity change from 0 to 262160 [ 142.361278][ T4415] loop5: detected capacity change from 0 to 262160 09:19:35 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x0, 0x28, 0x0, @scatter={0x7, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:35 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 142.377577][ T4416] FAT-fs (loop3): invalid media value (0x00) [ 142.377748][ T4418] loop2: detected capacity change from 0 to 262160 [ 142.383585][ T4416] FAT-fs (loop3): Can't find a valid FAT filesystem [ 142.408478][ C0] sd 0:0:1:0: [sda] tag#94 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 142.418668][ C0] sd 0:0:1:0: [sda] tag#94 CDB: opcode=0xe5 (vendor) [ 142.425366][ C0] sd 0:0:1:0: [sda] tag#94 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 142.434754][ C0] sd 0:0:1:0: [sda] tag#94 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 142.444158][ C0] sd 0:0:1:0: [sda] tag#94 CDB[20]: ba [ 142.486326][ T4418] FAT-fs (loop2): bogus number of reserved sectors [ 142.492880][ T4418] FAT-fs (loop2): Can't find a valid FAT filesystem [ 142.503942][ T1909] I/O error, dev loop4, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 09:19:36 executing program 0: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f8", 0x16}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:36 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000000000000500000000000000050000000000000000000080002400000000000000080000000000000000040000020000000800000000000000ffffffffffffffff9a01000000000000ff0700000000090000000000000009000000000000000400000000000040000000ef70a888d8933d210000a815ff8c4bdec553660100be00335113328bec52ef522ced03b400663b7c4bcde1cc40282b268782958c400906bf571e9cb0d711c4b339e2e881635422337ded64158a16f79493910e6c4b1d85cb9c9c8a1edc79084897e671d08c6dcc1371b4c3a1bee4d9284ce529ee2154938b8e2cdb7d656c8857fcf363b87299d82753efd3b2"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x0, 0x28, 0x0, @scatter={0x7, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:36 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 142.853067][ T4425] loop5: detected capacity change from 0 to 262160 [ 142.864239][ T4429] loop0: detected capacity change from 0 to 262160 [ 142.871996][ C0] sd 0:0:1:0: [sda] tag#93 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 142.882177][ C0] sd 0:0:1:0: [sda] tag#93 CDB: opcode=0xe5 (vendor) [ 142.888855][ C0] sd 0:0:1:0: [sda] tag#93 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c 09:19:36 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x0, 0x28, 0x0, @scatter={0x7, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:36 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 142.894842][ T4429] FAT-fs (loop0): bogus number of FAT sectors [ 142.898244][ C0] sd 0:0:1:0: [sda] tag#93 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 142.898262][ C0] sd 0:0:1:0: [sda] tag#93 CDB[20]: ba [ 142.919354][ T4429] FAT-fs (loop0): Can't find a valid FAT filesystem [ 142.957608][ C0] sd 0:0:1:0: [sda] tag#84 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 142.967819][ C0] sd 0:0:1:0: [sda] tag#84 CDB: opcode=0xe5 (vendor) [ 142.974530][ C0] sd 0:0:1:0: [sda] tag#84 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 142.983923][ C0] sd 0:0:1:0: [sda] tag#84 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 142.993300][ C0] sd 0:0:1:0: [sda] tag#84 CDB[20]: ba 09:19:36 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240", 0x12}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) socket(0x2, 0x6, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 142.999865][ T24] audit: type=1400 audit(1647681576.313:155): avc: denied { unlink } for pid=1422 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 143.066067][ T4437] loop5: detected capacity change from 0 to 262160 [ 143.074105][ T4435] loop4: detected capacity change from 0 to 262160 [ 143.097264][ T4435] FAT-fs (loop4): invalid media value (0x00) [ 143.103311][ T4435] FAT-fs (loop4): Can't find a valid FAT filesystem [ 143.166601][ T3243] I/O error, dev loop4, sector 262144 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 09:19:36 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240", 0x12}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:36 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x0, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {0x0}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:36 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:36 executing program 2: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x0, 0x28, 0x0, @scatter={0x7, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 143.259655][ T4444] loop5: detected capacity change from 0 to 262160 [ 143.260509][ T4445] loop3: detected capacity change from 0 to 262160 [ 143.270251][ C0] sd 0:0:1:0: [sda] tag#105 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 143.283011][ C0] sd 0:0:1:0: [sda] tag#105 CDB: opcode=0xe5 (vendor) [ 143.289768][ C0] sd 0:0:1:0: [sda] tag#105 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 143.299257][ C0] sd 0:0:1:0: [sda] tag#105 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d 09:19:36 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x0, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {0x0}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 143.304784][ T4445] FAT-fs (loop3): invalid media value (0x00) [ 143.308726][ C0] sd 0:0:1:0: [sda] tag#105 CDB[20]: ba [ 143.320285][ T4445] FAT-fs (loop3): Can't find a valid FAT filesystem [ 143.343566][ C0] sd 0:0:1:0: [sda] tag#127 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s 09:19:36 executing program 2: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240", 0x12}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) socket(0x2, 0x6, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 143.353842][ C0] sd 0:0:1:0: [sda] tag#127 CDB: opcode=0xe5 (vendor) [ 143.360603][ C0] sd 0:0:1:0: [sda] tag#127 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 143.370086][ C0] sd 0:0:1:0: [sda] tag#127 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 143.379563][ C0] sd 0:0:1:0: [sda] tag#127 CDB[20]: ba [ 143.425690][ T4450] loop2: detected capacity change from 0 to 262160 [ 143.443323][ T4450] FAT-fs (loop2): invalid media value (0x00) [ 143.449340][ T4450] FAT-fs (loop2): Can't find a valid FAT filesystem 09:19:37 executing program 0: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f8", 0x16}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:37 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:37 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x0, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {0x0}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:37 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 143.726803][ T4453] loop5: detected capacity change from 0 to 262160 [ 143.731721][ T4456] loop0: detected capacity change from 0 to 262160 [ 143.746361][ T4456] FAT-fs (loop0): bogus number of FAT sectors [ 143.752477][ T4456] FAT-fs (loop0): Can't find a valid FAT filesystem 09:19:37 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000000000000500000000000000050000000000000000000080002400000000000000080000000000000000040000020000000800000000000000ffffffffffffffff9a01000000000000ff0700000000090000000000000009000000000000000400000000000040000000ef70a888d8933d210000a815ff8c4bdec553660100be00335113328bec52ef522ced03b400663b7c4bcde1cc40282b268782958c400906bf571e9cb0d711c4b339e2e881635422337ded64158a16f79493910e6c4b1d85cb9c9c8a1edc79084897e671d08c6dcc1371b4c3a1bee4d9284ce529ee2154938b8e2cdb7d656c8857fcf363b87299d82753efd3b2"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x0, 0x28, 0x0, @scatter={0x7, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 143.822513][ T4458] loop5: detected capacity change from 0 to 262160 09:19:37 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240", 0x12}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) socket(0x2, 0x6, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 143.924195][ T4462] loop4: detected capacity change from 0 to 262160 [ 143.950860][ T4462] FAT-fs (loop4): invalid media value (0x00) [ 143.956993][ T4462] FAT-fs (loop4): Can't find a valid FAT filesystem 09:19:37 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f8", 0x16}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:37 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:37 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x0, 0x28, 0x0, @scatter={0x7, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:37 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x0, 0x28, 0x0, @scatter={0x7, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 144.104644][ T4466] loop5: detected capacity change from 0 to 262160 [ 144.117988][ T4468] loop3: detected capacity change from 0 to 262160 09:19:37 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 144.158415][ T4468] FAT-fs (loop3): bogus number of FAT sectors [ 144.164593][ T4468] FAT-fs (loop3): Can't find a valid FAT filesystem 09:19:37 executing program 2: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f8", 0x16}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 144.256588][ T4473] loop2: detected capacity change from 0 to 262160 [ 144.268660][ T4475] loop5: detected capacity change from 0 to 262160 [ 144.299831][ T4473] FAT-fs (loop2): bogus number of FAT sectors [ 144.305985][ T4473] FAT-fs (loop2): Can't find a valid FAT filesystem 09:19:37 executing program 0: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f8", 0x16}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:37 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x0, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {0x0}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:37 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(0x0, 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:37 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x0, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {0x0}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 144.514711][ T4481] loop5: detected capacity change from 0 to 262160 [ 144.524477][ T4482] loop0: detected capacity change from 0 to 262160 09:19:37 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(0x0, 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 144.578452][ T4482] FAT-fs (loop0): bogus number of FAT sectors [ 144.584600][ T4482] FAT-fs (loop0): Can't find a valid FAT filesystem [ 144.659441][ T4486] loop5: detected capacity change from 0 to 262160 09:19:38 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080", 0x15}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) socket(0x2, 0x6, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 144.787088][ T4488] loop4: detected capacity change from 0 to 262160 [ 144.803498][ T4488] FAT-fs (loop4): invalid media value (0x00) [ 144.809526][ T4488] FAT-fs (loop4): Can't find a valid FAT filesystem 09:19:38 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000000000000500000000000000050000000000000000000080002400000000000000080000000000000000040000020000000800000000000000ffffffffffffffff9a01000000000000ff0700000000090000000000000009000000000000000400000000000040000000ef70a888d8933d210000a815ff8c4bdec553660100be00335113328bec52ef522ced03b400663b7c4bcde1cc40282b268782958c400906bf571e9cb0d711c4b339e2e881635422337ded64158a16f79493910e6c4b1d85cb9c9c8a1edc79084897e671d08c6dcc1371b4c3a1bee4d9284ce529ee2154938b8e2cdb7d656c8857fcf363b87299d82753efd3b2"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x0, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {0x0}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:38 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f8", 0x16}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:38 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(0x0, 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 144.989763][ T4492] loop5: detected capacity change from 0 to 262160 [ 145.012383][ T4494] loop3: detected capacity change from 0 to 262160 09:19:38 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x0, 0x28, 0x0, @scatter={0x7, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:38 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 145.073599][ T4494] FAT-fs (loop3): bogus number of FAT sectors [ 145.079789][ T4494] FAT-fs (loop3): Can't find a valid FAT filesystem 09:19:38 executing program 2: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f8", 0x16}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 145.151082][ T4498] loop5: detected capacity change from 0 to 262160 [ 145.179939][ T4500] loop2: detected capacity change from 0 to 262160 [ 145.218232][ T4500] FAT-fs (loop2): bogus number of FAT sectors [ 145.224462][ T4500] FAT-fs (loop2): Can't find a valid FAT filesystem 09:19:38 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x0, 0x28, 0x0, @scatter={0x7, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:38 executing program 0: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:38 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 145.383244][ T4504] loop0: detected capacity change from 0 to 262160 [ 145.384690][ T4506] loop5: detected capacity change from 0 to 262160 09:19:38 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x0, 0x28, 0x0, @scatter={0x7, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:38 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 145.540483][ T4510] loop5: detected capacity change from 0 to 262160 09:19:38 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080", 0x15}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) socket(0x2, 0x6, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:38 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x0, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {0x0}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 145.648869][ T4514] loop4: detected capacity change from 0 to 262160 [ 145.664038][ T4514] FAT-fs (loop4): invalid media value (0x00) [ 145.670072][ T4514] FAT-fs (loop4): Can't find a valid FAT filesystem 09:19:39 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x10000) 09:19:39 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x0, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {0x0}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:39 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080", 0x15}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) socket(0x2, 0x6, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:39 executing program 0: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 145.909222][ T4518] loop5: detected capacity change from 0 to 262160 [ 145.916628][ T4519] loop0: detected capacity change from 0 to 262160 [ 145.944583][ T4522] loop3: detected capacity change from 0 to 262160 09:19:39 executing program 2: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240", 0x12}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) socket(0x2, 0x6, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:39 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x0, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {0x0}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:39 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x10000) [ 146.002786][ T4522] FAT-fs (loop3): invalid media value (0x00) [ 146.008818][ T4522] FAT-fs (loop3): Can't find a valid FAT filesystem 09:19:39 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x0, 0x28, 0x0, @scatter={0x7, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:39 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x10000) [ 146.060638][ T4526] loop5: detected capacity change from 0 to 262160 [ 146.074406][ T4528] loop2: detected capacity change from 0 to 262160 09:19:39 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000000000000500000000000000050000000000000000000080002400000000000000080000000000000000040000020000000800000000000000ffffffffffffffff9a01000000000000ff0700000000090000000000000009000000000000000400000000000040000000ef70a888d8933d210000a815ff8c4bdec553660100be00335113328bec52ef522ced03b400663b7c4bcde1cc40282b268782958c400906bf571e9cb0d711c4b339e2e881635422337ded64158a16f79493910e6c4b1d85cb9c9c8a1edc79084897e671d08c6dcc1371b4c3a1bee4d9284ce529ee2154938b8e2cdb7d656c8857fcf363b87299d82753efd3b2"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x0, 0x28, 0x0, @scatter={0x7, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 146.123864][ T4528] FAT-fs (loop2): invalid media value (0x00) [ 146.129882][ T4528] FAT-fs (loop2): Can't find a valid FAT filesystem [ 146.159220][ T4532] loop5: detected capacity change from 0 to 262160 09:19:39 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080", 0x15}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) socket(0x2, 0x6, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:39 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x10000) 09:19:39 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x0, 0x28, 0x0, @scatter={0x7, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:39 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x0, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {0x0}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 146.411895][ T4537] loop5: detected capacity change from 0 to 262160 [ 146.438524][ T4541] loop4: detected capacity change from 0 to 262160 [ 146.517848][ T4541] FAT-fs (loop4): invalid media value (0x00) [ 146.523894][ T4541] FAT-fs (loop4): Can't find a valid FAT filesystem 09:19:40 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:40 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x10000) 09:19:40 executing program 2: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x0, 0x28, 0x0, @scatter={0x7, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 146.756849][ T4546] loop5: detected capacity change from 0 to 262160 [ 146.777786][ T4548] loop3: detected capacity change from 0 to 262160 09:19:40 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x0, 0x28, 0x0, @scatter={0x8, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {0x0}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:40 executing program 0: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:40 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x10000) [ 146.817453][ T4551] loop0: detected capacity change from 0 to 262160 [ 146.833146][ C1] scsi_io_completion_action: 18 callbacks suppressed [ 146.833174][ C1] sd 0:0:1:0: [sda] tag#117 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 146.835352][ T4554] loop5: detected capacity change from 0 to 262160 [ 146.839918][ C1] sd 0:0:1:0: [sda] tag#117 CDB: opcode=0xe5 (vendor) 09:19:40 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x0) 09:19:40 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080", 0x15}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 146.863424][ C1] sd 0:0:1:0: [sda] tag#117 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 146.873205][ C1] sd 0:0:1:0: [sda] tag#117 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 146.882678][ C1] sd 0:0:1:0: [sda] tag#117 CDB[20]: ba [ 146.913063][ C1] sd 0:0:1:0: [sda] tag#119 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 146.923373][ C1] sd 0:0:1:0: [sda] tag#119 CDB: opcode=0xe5 (vendor) [ 146.930132][ C1] sd 0:0:1:0: [sda] tag#119 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 146.939617][ C1] sd 0:0:1:0: [sda] tag#119 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 146.949095][ C1] sd 0:0:1:0: [sda] tag#119 CDB[20]: ba [ 146.983452][ T4559] loop5: detected capacity change from 0 to 262160 [ 146.997151][ T4561] loop3: detected capacity change from 0 to 262160 [ 147.053476][ T4561] FAT-fs (loop3): invalid media value (0x00) [ 147.059512][ T4561] FAT-fs (loop3): Can't find a valid FAT filesystem 09:19:40 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f8", 0x16}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) socket(0x2, 0x6, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:40 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x0, 0x28, 0x0, @scatter={0x7, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {0x0}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:40 executing program 2: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x0, 0x28, 0x0, @scatter={0x7, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:40 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x0) 09:19:40 executing program 0: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, 0x0) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 147.249770][ C0] sd 0:0:1:0: [sda] tag#111 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 147.253462][ C1] sd 0:0:1:0: [sda] tag#112 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 147.260045][ C0] sd 0:0:1:0: [sda] tag#111 CDB: opcode=0xe5 (vendor) [ 147.270267][ C1] sd 0:0:1:0: [sda] tag#112 CDB: opcode=0xe5 (vendor) [ 147.277025][ C0] sd 0:0:1:0: [sda] tag#111 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 147.283753][ C1] sd 0:0:1:0: [sda] tag#112 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 147.293202][ C0] sd 0:0:1:0: [sda] tag#111 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 147.302624][ C1] sd 0:0:1:0: [sda] tag#112 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 147.312055][ C0] sd 0:0:1:0: [sda] tag#111 CDB[20]: ba [ 147.321498][ C1] sd 0:0:1:0: [sda] tag#112 CDB[20]: ba [ 147.337488][ T4571] loop4: detected capacity change from 0 to 262160 09:19:40 executing program 2: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x0, 0x28, 0x0, @scatter={0x7, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000001640)=""/196, 0xc4}, {&(0x7f0000001740)=""/168, 0xa8}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 147.344245][ T4566] loop5: detected capacity change from 0 to 262160 [ 147.365392][ T4571] FAT-fs (loop4): bogus number of FAT sectors [ 147.371519][ T4571] FAT-fs (loop4): Can't find a valid FAT filesystem [ 147.372099][ C0] sd 0:0:1:0: [sda] tag#118 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 147.388342][ C0] sd 0:0:1:0: [sda] tag#118 CDB: opcode=0xe5 (vendor) 09:19:40 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x0, 0x28, 0x0, @scatter={0x6, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:40 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x0) [ 147.395139][ C0] sd 0:0:1:0: [sda] tag#118 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 147.404605][ C0] sd 0:0:1:0: [sda] tag#118 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 147.414090][ C0] sd 0:0:1:0: [sda] tag#118 CDB[20]: ba [ 147.437416][ T4580] loop0: detected capacity change from 0 to 262160 09:19:40 executing program 2: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080", 0x15}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) socket(0x2, 0x6, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 147.451613][ C0] sd 0:0:1:0: [sda] tag#127 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 147.461897][ C0] sd 0:0:1:0: [sda] tag#127 CDB: opcode=0xe5 (vendor) [ 147.468677][ C0] sd 0:0:1:0: [sda] tag#127 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 147.478162][ C0] sd 0:0:1:0: [sda] tag#127 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 147.487636][ C0] sd 0:0:1:0: [sda] tag#127 CDB[20]: ba 09:19:40 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x0, 0x28, 0x0, @scatter={0x6, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:40 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 147.503308][ T4583] loop2: detected capacity change from 0 to 262160 [ 147.512012][ T4583] FAT-fs (loop2): invalid media value (0x00) [ 147.518017][ T4583] FAT-fs (loop2): Can't find a valid FAT filesystem [ 147.531902][ T4581] loop5: detected capacity change from 0 to 262160 [ 147.607231][ C0] sd 0:0:1:0: [sda] tag#75 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 147.617436][ C0] sd 0:0:1:0: [sda] tag#75 CDB: opcode=0xe5 (vendor) [ 147.624144][ C0] sd 0:0:1:0: [sda] tag#75 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 147.633534][ C0] sd 0:0:1:0: [sda] tag#75 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 147.642927][ C0] sd 0:0:1:0: [sda] tag#75 CDB[20]: ba 09:19:41 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080", 0x15}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 147.919541][ T4590] loop3: detected capacity change from 0 to 262160 [ 147.928917][ T4590] FAT-fs (loop3): invalid media value (0x00) [ 147.935309][ T4590] FAT-fs (loop3): Can't find a valid FAT filesystem 09:19:41 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f8", 0x16}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) socket(0x2, 0x6, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:41 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x0, 0x28, 0x0, @scatter={0x6, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 148.210269][ C0] sd 0:0:1:0: [sda] tag#111 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 148.220576][ C0] sd 0:0:1:0: [sda] tag#111 CDB: opcode=0xe5 (vendor) [ 148.227362][ C0] sd 0:0:1:0: [sda] tag#111 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 148.236844][ C0] sd 0:0:1:0: [sda] tag#111 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 148.246312][ C0] sd 0:0:1:0: [sda] tag#111 CDB[20]: ba 09:19:41 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x0, 0x28, 0x0, @scatter={0x5, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {0x0}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 148.261912][ T4594] loop4: detected capacity change from 0 to 262160 [ 148.296876][ T4594] FAT-fs (loop4): bogus number of FAT sectors [ 148.302966][ T4594] FAT-fs (loop4): Can't find a valid FAT filesystem 09:19:41 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000000000000500000000000000050000000000000000000080002400000000000000080000000000000000040000020000000800000000000000ffffffffffffffff9a01000000000000ff0700000000090000000000000009000000000000000400000000000040000000ef70a888d8933d210000a815ff8c4bdec553660100be00335113328bec52ef522ced03b400663b7c4bcde1cc40282b268782958c400906bf571e9cb0d711c4b339e2e881635422337ded64158a16f79493910e6c4b1d85cb9c9c8a1edc79084897e671d08c6dcc1371b4c3a1bee4d9284ce529ee2154938b8e2cdb7d656c8857fcf363b87299d82753efd3b2"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x0, 0x28, 0x0, @scatter={0x5, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {0x0}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 148.334444][ C0] sd 0:0:1:0: [sda] tag#115 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 148.344737][ C0] sd 0:0:1:0: [sda] tag#115 CDB: opcode=0xe5 (vendor) [ 148.351528][ C0] sd 0:0:1:0: [sda] tag#115 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 148.360988][ C0] sd 0:0:1:0: [sda] tag#115 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 148.370475][ C0] sd 0:0:1:0: [sda] tag#115 CDB[20]: ba 09:19:41 executing program 0: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, 0x0) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:41 executing program 2: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080", 0x15}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) socket(0x2, 0x6, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:41 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, 0x0) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 148.439746][ C1] sd 0:0:1:0: [sda] tag#72 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 148.449990][ C1] sd 0:0:1:0: [sda] tag#72 CDB: opcode=0xe5 (vendor) [ 148.456683][ C1] sd 0:0:1:0: [sda] tag#72 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 148.459519][ T4600] loop2: detected capacity change from 0 to 262160 [ 148.466072][ C1] sd 0:0:1:0: [sda] tag#72 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 148.466091][ C1] sd 0:0:1:0: [sda] tag#72 CDB[20]: ba 09:19:41 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x0, 0x28, 0x0, @scatter={0x5, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {0x0}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 148.484328][ T4602] loop5: detected capacity change from 0 to 262160 [ 148.505125][ T4600] FAT-fs (loop2): invalid media value (0x00) [ 148.511133][ T4600] FAT-fs (loop2): Can't find a valid FAT filesystem 09:19:41 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000000000000500000000000000050000000000000000000080002400000000000000080000000000000000040000020000000800000000000000ffffffffffffffff9a01000000000000ff0700000000090000000000000009000000000000000400000000000040000000ef70a888d8933d210000a815ff8c4bdec553660100be00335113328bec52ef522ced03b400663b7c4bcde1cc40282b268782958c400906bf571e9cb0d711c4b339e2e881635422337ded64158a16f79493910e6c4b1d85cb9c9c8a1edc79084897e671d08c6dcc1371b4c3a1bee4d9284ce529ee2154938b8e2cdb7d656c8857fcf363b87299d82753efd3b2"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x0, 0x28, 0x0, @scatter={0x6, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {0x0}, {0x0}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 148.542929][ T4606] loop0: detected capacity change from 0 to 262160 09:19:42 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000000000000500000000000000050000000000000000000080002400000000000000080000000000000000040000020000000800000000000000ffffffffffffffff9a01000000000000ff0700000000090000000000000009000000000000000400000000000040000000ef70a888d8933d210000a815ff8c4bdec553660100be00335113328bec52ef522ced03b400663b7c4bcde1cc40282b268782958c400906bf571e9cb0d711c4b339e2e881635422337ded64158a16f79493910e6c4b1d85cb9c9c8a1edc79084897e671d08c6dcc1371b4c3a1bee4d9284ce529ee2154938b8e2cdb7d656c8857fcf363b87299d82753efd3b2"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x0, 0x28, 0x0, @scatter={0x6, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {0x0}, {0x0}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:42 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x0, 0x28, 0x0, @scatter={0x6, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {0x0}, {0x0}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:42 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, 0x0) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 148.819457][ T4615] loop3: detected capacity change from 0 to 262160 [ 148.915256][ T1909] I/O error, dev loop5, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 09:19:42 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000000000000500000000000000050000000000000000000080002400000000000000080000000000000000040000020000000800000000000000ffffffffffffffff9a01000000000000ff0700000000090000000000000009000000000000000400000000000040000000ef70a888d8933d210000a815ff8c4bdec553660100be00335113328bec52ef522ced03b400663b7c4bcde1cc40282b268782958c400906bf571e9cb0d711c4b339e2e881635422337ded64158a16f79493910e6c4b1d85cb9c9c8a1edc79084897e671d08c6dcc1371b4c3a1bee4d9284ce529ee2154938b8e2cdb7d656c8857fcf363b87299d82753efd3b2"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x0, 0x28, 0x0, @scatter={0x5, 0x0, &(0x7f0000001900)=[{&(0x7f0000000640)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:42 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f8", 0x16}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) socket(0x2, 0x6, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:42 executing program 5: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x0, 0x28, 0x0, @scatter={0x5, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {0x0}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:42 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x0, 0x28, 0x0, @scatter={0x5, 0x0, &(0x7f0000001900)=[{&(0x7f0000000640)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 149.136338][ T4621] loop4: detected capacity change from 0 to 262160 [ 149.161287][ T4621] FAT-fs (loop4): bogus number of FAT sectors [ 149.167471][ T4621] FAT-fs (loop4): Can't find a valid FAT filesystem 09:19:42 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f8", 0x16}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) socket(0x2, 0x6, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:42 executing program 2: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080", 0x15}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) socket(0x2, 0x6, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:42 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x0, 0x28, 0x0, @scatter={0x5, 0x0, &(0x7f0000001900)=[{&(0x7f0000000640)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:42 executing program 0: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, 0x0) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 149.286055][ T4625] loop5: detected capacity change from 0 to 262160 [ 149.312464][ T4625] FAT-fs (loop5): bogus number of FAT sectors [ 149.318562][ T4625] FAT-fs (loop5): Can't find a valid FAT filesystem 09:19:42 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x0, 0x28, 0x0, @scatter={0x6, 0x0, &(0x7f0000001900)=[{0x0}, {&(0x7f0000000640)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 149.344936][ T4629] loop0: detected capacity change from 0 to 262160 [ 149.368198][ T4631] loop2: detected capacity change from 0 to 262160 [ 149.376144][ T3243] I/O error, dev loop5, sector 262144 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 149.430252][ T4631] FAT-fs (loop2): invalid media value (0x00) [ 149.436317][ T4631] FAT-fs (loop2): Can't find a valid FAT filesystem 09:19:42 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x0, 0x28, 0x0, @scatter={0x6, 0x0, &(0x7f0000001900)=[{0x0}, {&(0x7f0000000640)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:42 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x0, 0x28, 0x0, @scatter={0x6, 0x0, &(0x7f0000001900)=[{0x0}, {&(0x7f0000000640)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:42 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, 0x0) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:42 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x0, 0x0, 0x0, @scatter={0x6, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, 0x0, &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:43 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000000000000500000000000000050000000000000000000080002400000000000000080000000000000000040000020000000800000000000000ffffffffffffffff9a01000000000000ff0700000000090000000000000009000000000000000400000000000040000000ef70a888d8933d210000a815ff8c4bdec553660100be00335113328bec52ef522ced03b400663b7c4bcde1cc40282b268782958c400906bf571e9cb0d711c4b339e2e881635422337ded64158a16f79493910e6c4b1d85cb9c9c8a1edc79084897e671d08c6dcc1371b4c3a1bee4d9284ce529ee2154938b8e2cdb7d656c8857fcf363b87299d82753efd3b2"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x0, 0x0, 0x0, @scatter={0x6, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, 0x0, &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 149.693437][ T3243] I/O error, dev loop3, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 149.704248][ T4641] loop3: detected capacity change from 0 to 262160 [ 149.712319][ T3243] I/O error, dev loop3, sector 262016 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 149.721927][ T3243] Buffer I/O error on dev loop3, logical block 32752, async page read 09:19:43 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) socket(0x2, 0x6, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:43 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x0, 0x0, 0x0, @scatter={0x6, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, 0x0, &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 150.012877][ T4647] loop4: detected capacity change from 0 to 262160 09:19:43 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f8", 0x16}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) socket(0x2, 0x6, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:43 executing program 2: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080", 0x15}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) socket(0x2, 0x6, 0x0) lseek(r0, 0x200, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x10000) 09:19:43 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x0, 0x0, 0x0, @scatter={0x6, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300), &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:43 executing program 0: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 150.189461][ T4649] loop5: detected capacity change from 0 to 262160 [ 150.205899][ T4649] FAT-fs (loop5): bogus number of FAT sectors [ 150.212015][ T4649] FAT-fs (loop5): Can't find a valid FAT filesystem [ 150.270854][ T4653] loop0: detected capacity change from 0 to 262160 [ 150.303694][ T4655] loop2: detected capacity change from 0 to 262160 09:19:43 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x0, 0x0, 0x0, @scatter={0x6, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300), &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 150.347849][ T4655] FAT-fs (loop2): invalid media value (0x00) [ 150.353893][ T4655] FAT-fs (loop2): Can't find a valid FAT filesystem 09:19:43 executing program 2: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080", 0x15}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) socket(0x2, 0x6, 0x0) lseek(r0, 0x200, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x10000) 09:19:43 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x0, 0x0, 0x0, @scatter={0x6, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300), &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 150.440492][ T4659] loop2: detected capacity change from 0 to 262160 [ 150.467125][ T4659] FAT-fs (loop2): invalid media value (0x00) [ 150.473168][ T4659] FAT-fs (loop2): Can't find a valid FAT filesystem 09:19:44 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, 0x0) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:44 executing program 2: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080", 0x15}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) socket(0x2, 0x6, 0x0) lseek(r0, 0x200, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x10000) 09:19:44 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x0, 0x14, 0x0, @scatter={0x6, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b8", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:44 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) socket(0x2, 0x6, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 150.680475][ T4664] loop2: detected capacity change from 0 to 262160 09:19:44 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x0, 0x14, 0x0, @scatter={0x6, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b8", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 150.729394][ T4668] loop3: detected capacity change from 0 to 262160 [ 150.732564][ T4669] loop4: detected capacity change from 0 to 262160 [ 150.749052][ T4664] FAT-fs (loop2): invalid media value (0x00) [ 150.755094][ T4664] FAT-fs (loop2): Can't find a valid FAT filesystem 09:19:44 executing program 5: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x0, 0x28, 0x0, @scatter={0x6, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:44 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x0, 0x14, 0x0, @scatter={0x6, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b8", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:44 executing program 2: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080", 0x15}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) socket(0x2, 0x6, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:44 executing program 0: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:44 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x0, 0x1e, 0x0, @scatter={0x6, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 151.176767][ T4678] loop2: detected capacity change from 0 to 262160 09:19:44 executing program 5: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x0, 0x28, 0x0, @scatter={0x6, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598c20d", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 151.229217][ T4680] loop0: detected capacity change from 0 to 262160 [ 151.235087][ T4678] FAT-fs (loop2): invalid media value (0x00) [ 151.241732][ T4678] FAT-fs (loop2): Can't find a valid FAT filesystem 09:19:44 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000000000000500000000000000050000000000000000000080002400000000000000080000000000000000040000020000000800000000000000ffffffffffffffff9a01000000000000ff0700000000090000000000000009000000000000000400000000000040000000ef70a888d8933d210000a815ff8c4bdec553660100be00335113328bec52ef522ced03b400663b7c4bcde1cc40282b268782958c400906bf571e9cb0d711c4b339e2e881635422337ded64158a16f79493910e6c4b1d85cb9c9c8a1edc79084897e671d08c6dcc1371b4c3a1bee4d9284ce529ee2154938b8e2cdb7d656c8857fcf363b87299d82753efd3b2"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x0, 0x1e, 0x0, @scatter={0x6, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:44 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) socket(0x2, 0x6, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:44 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f8", 0x16}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) socket(0x2, 0x6, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:44 executing program 2: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080", 0x15}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) socket(0x2, 0x6, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:44 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x0, 0x1e, 0x0, @scatter={0x6, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:44 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) socket(0x2, 0x6, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 151.606323][ T4692] loop4: detected capacity change from 0 to 262160 [ 151.610280][ T4694] loop2: detected capacity change from 0 to 262160 [ 151.613668][ T4695] loop5: detected capacity change from 0 to 262160 [ 151.629442][ T3243] ================================================================== [ 151.637565][ T3243] BUG: KCSAN: data-race in copy_page_to_iter / fat_set_state [ 151.637667][ T4695] FAT-fs (loop5): bogus number of FAT sectors [ 151.644938][ T3243] [ 151.644944][ T3243] write to 0xffff888126778025 of 1 bytes by task 4692 on cpu 0: [ 151.644960][ T3243] fat_set_state+0x16c/0x1d0 [ 151.644982][ T3243] fat_fill_super+0x26a4/0x2af0 [ 151.651022][ T4695] FAT-fs (loop5): Can't find a valid FAT filesystem [ 151.653321][ T3243] vfat_fill_super+0x2c/0x40 [ 151.653343][ T3243] mount_bdev+0x1e8/0x290 [ 151.685887][ T3243] vfat_mount+0x2d/0x40 [ 151.690068][ T3243] legacy_get_tree+0x70/0xc0 [ 151.694660][ T3243] vfs_get_tree+0x4a/0x1a0 [ 151.699073][ T3243] path_mount+0x11cf/0x1c40 [ 151.703577][ T3243] __se_sys_mount+0x24b/0x2f0 [ 151.708258][ T3243] __x64_sys_mount+0x63/0x70 [ 151.712844][ T3243] do_syscall_64+0x44/0xd0 [ 151.717257][ T3243] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 151.723149][ T3243] [ 151.725465][ T3243] read to 0xffff888126778000 of 256 bytes by task 3243 on cpu 1: [ 151.733169][ T3243] copy_page_to_iter+0x2cb/0x960 [ 151.738109][ T3243] filemap_read+0x1126/0x1430 [ 151.742789][ T3243] blkdev_read_iter+0x2cc/0x380 [ 151.747651][ T3243] vfs_read+0x66c/0x750 [ 151.751811][ T3243] ksys_read+0xd9/0x190 [ 151.755964][ T3243] __x64_sys_read+0x3e/0x50 [ 151.760460][ T3243] do_syscall_64+0x44/0xd0 [ 151.764871][ T3243] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 151.770776][ T3243] [ 151.773091][ T3243] Reported by Kernel Concurrency Sanitizer on: [ 151.779228][ T3243] CPU: 1 PID: 3243 Comm: udevd Not tainted 5.17.0-rc8-syzkaller-00061-g34e047aa16c0-dirty #0 [ 151.789381][ T3243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 151.799431][ T3243] ================================================================== 09:19:45 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x0, 0x23, 0x0, @scatter={0x6, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7de", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:45 executing program 2: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080", 0x15}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) socket(0x2, 0x6, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:45 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, 0x0) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) socket(0x2, 0x6, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 151.849739][ T4699] loop3: detected capacity change from 0 to 262160 [ 151.923616][ T4705] loop2: detected capacity change from 0 to 262160 [ 151.936062][ C0] scsi_io_completion_action: 25 callbacks suppressed [ 151.936090][ C0] sd 0:0:1:0: [sda] tag#70 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 151.952989][ C0] sd 0:0:1:0: [sda] tag#70 CDB: opcode=0xe5 (vendor) [ 151.959676][ C0] sd 0:0:1:0: [sda] tag#70 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 151.969057][ C0] sd 0:0:1:0: [sda] tag#70 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 151.980523][ C0] sd 0:0:1:0: [sda] tag#70 CDB[20]: ba [ 151.997238][ T4705] FAT-fs (loop2): invalid media value (0x00) [ 152.003278][ T4705] FAT-fs (loop2): Can't find a valid FAT filesystem 09:19:45 executing program 0: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:45 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x0, 0x23, 0x0, @scatter={0x6, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7de", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:45 executing program 2: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080", 0x15}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 152.100136][ C0] sd 0:0:1:0: [sda] tag#97 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 152.102553][ T4710] loop2: detected capacity change from 0 to 262160 [ 152.110372][ C0] sd 0:0:1:0: [sda] tag#97 CDB: opcode=0xe5 (vendor) [ 152.123472][ C0] sd 0:0:1:0: [sda] tag#97 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 152.132863][ C0] sd 0:0:1:0: [sda] tag#97 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 152.142280][ C0] sd 0:0:1:0: [sda] tag#97 CDB[20]: ba 09:19:45 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x0, 0x23, 0x0, @scatter={0x6, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7de", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 152.143792][ T4710] FAT-fs (loop2): invalid media value (0x00) [ 152.153795][ T4710] FAT-fs (loop2): Can't find a valid FAT filesystem [ 152.169681][ T4712] loop0: detected capacity change from 0 to 262160 [ 152.228060][ C0] sd 0:0:1:0: [sda] tag#98 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 152.238288][ C0] sd 0:0:1:0: [sda] tag#98 CDB: opcode=0xe5 (vendor) [ 152.244992][ C0] sd 0:0:1:0: [sda] tag#98 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 152.254429][ C0] sd 0:0:1:0: [sda] tag#98 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 152.263841][ C0] sd 0:0:1:0: [sda] tag#98 CDB[20]: ba 09:19:45 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) socket(0x2, 0x6, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:45 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x0, 0x26, 0x0, @scatter={0x6, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:45 executing program 5: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x0, 0x23, 0x0, @scatter={0x6, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7de", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 152.526023][ C1] sd 0:0:1:0: [sda] tag#70 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 152.536245][ C1] sd 0:0:1:0: [sda] tag#70 CDB: opcode=0xe5 (vendor) [ 152.539446][ C0] sd 0:0:1:0: [sda] tag#74 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 152.542961][ C1] sd 0:0:1:0: [sda] tag#70 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 152.553103][ C0] sd 0:0:1:0: [sda] tag#74 CDB: opcode=0xe5 (vendor) 09:19:45 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x0, 0x26, 0x0, @scatter={0x6, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee64598", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 152.562569][ C1] sd 0:0:1:0: [sda] tag#70 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 152.569191][ C0] sd 0:0:1:0: [sda] tag#74 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 152.578543][ C1] sd 0:0:1:0: [sda] tag#70 CDB[20]: ba [ 152.587891][ C0] sd 0:0:1:0: [sda] tag#74 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 152.602718][ C0] sd 0:0:1:0: [sda] tag#74 CDB[20]: ba 09:19:46 executing program 5: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x0, 0x23, 0x0, @scatter={0x6, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7de", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 152.633827][ T4725] loop3: detected capacity change from 0 to 262160 [ 152.640254][ C0] sd 0:0:1:0: [sda] tag#84 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 152.650517][ C0] sd 0:0:1:0: [sda] tag#84 CDB: opcode=0xe5 (vendor) [ 152.657216][ C0] sd 0:0:1:0: [sda] tag#84 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 152.666651][ C0] sd 0:0:1:0: [sda] tag#84 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 152.676059][ C0] sd 0:0:1:0: [sda] tag#84 CDB[20]: ba 09:19:46 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000000000000500000000000000050000000000000000000080002400000000000000080000000000000000040000020000000800000000000000ffffffffffffffff9a01000000000000ff0700000000090000000000000009000000000000000400000000000040000000ef70a888d8933d210000a815ff8c4bdec553660100be00335113328bec52ef522ced03b400663b7c4bcde1cc40282b268782958c400906bf571e9cb0d711c4b339e2e881635422337ded64158a16f79493910e6c4b1d85cb9c9c8a1edc79084897e671d08c6dcc1371b4c3a1bee4d9284ce529ee2154938b8e2cdb7d656c8857fcf363b87299d82753efd3b2"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x0, 0x24, 0x0, @scatter={0x6, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7dee6", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:46 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, 0x0) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) socket(0x2, 0x6, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 152.724044][ C0] sd 0:0:1:0: [sda] tag#117 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 152.734334][ C0] sd 0:0:1:0: [sda] tag#117 CDB: opcode=0xe5 (vendor) [ 152.741119][ C0] sd 0:0:1:0: [sda] tag#117 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 152.750607][ C0] sd 0:0:1:0: [sda] tag#117 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 152.760074][ C0] sd 0:0:1:0: [sda] tag#117 CDB[20]: ba 09:19:46 executing program 5: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x0, 0x23, 0x0, @scatter={0x6, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7de", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 152.790276][ C0] sd 0:0:1:0: [sda] tag#108 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 152.800566][ C0] sd 0:0:1:0: [sda] tag#108 CDB: opcode=0xe5 (vendor) [ 152.802672][ T4732] loop4: detected capacity change from 0 to 262160 [ 152.807368][ C0] sd 0:0:1:0: [sda] tag#108 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 152.823306][ C0] sd 0:0:1:0: [sda] tag#108 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 152.832778][ C0] sd 0:0:1:0: [sda] tag#108 CDB[20]: ba [ 152.861628][ C0] sd 0:0:1:0: [sda] tag#78 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 152.871986][ C0] sd 0:0:1:0: [sda] tag#78 CDB: opcode=0xe5 (vendor) [ 152.878667][ C0] sd 0:0:1:0: [sda] tag#78 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 152.888054][ C0] sd 0:0:1:0: [sda] tag#78 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 152.897441][ C0] sd 0:0:1:0: [sda] tag#78 CDB[20]: ba 09:19:46 executing program 0: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:46 executing program 5: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x0, 0x23, 0x0, @scatter={0x6, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7de", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:46 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x0, 0x22, 0x0, @scatter={0x6, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:46 executing program 2: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080", 0x15}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 153.025532][ C0] sd 0:0:1:0: [sda] tag#90 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 153.035735][ C0] sd 0:0:1:0: [sda] tag#90 CDB: opcode=0xe5 (vendor) [ 153.042432][ C0] sd 0:0:1:0: [sda] tag#90 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 153.051852][ C0] sd 0:0:1:0: [sda] tag#90 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 153.054998][ T4742] loop2: detected capacity change from 0 to 262160 [ 153.061215][ C0] sd 0:0:1:0: [sda] tag#90 CDB[20]: ba [ 153.093493][ T4742] FAT-fs (loop2): invalid media value (0x00) [ 153.099536][ T4742] FAT-fs (loop2): Can't find a valid FAT filesystem [ 153.109580][ T4744] loop0: detected capacity change from 0 to 262160 09:19:46 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) socket(0x2, 0x6, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:46 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:46 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x0, 0x20, 0x0, @scatter={0x6, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fd", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:46 executing program 0: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 153.289121][ T4746] loop5: detected capacity change from 0 to 262160 09:19:46 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x0, 0x20, 0x0, @scatter={0x6, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fd", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 153.341205][ T4750] loop3: detected capacity change from 0 to 262160 [ 153.360801][ T4752] loop0: detected capacity change from 0 to 262160 09:19:46 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x0, 0x20, 0x0, @scatter={0x6, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fd", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:47 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, 0x0) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) socket(0x2, 0x6, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:47 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x0, 0x21, 0x0, @scatter={0x6, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfb", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:47 executing program 0: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:47 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x0, 0x21, 0x0, @scatter={0x6, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfb", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 153.733106][ T4760] loop0: detected capacity change from 0 to 262160 [ 153.758845][ T4762] loop4: detected capacity change from 0 to 262160 09:19:47 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000000000000500000000000000050000000000000000000080002400000000000000080000000000000000040000020000000800000000000000ffffffffffffffff9a01000000000000ff0700000000090000000000000009000000000000000400000000000040000000ef70a888d8933d210000a815ff8c4bdec553660100be00335113328bec52ef522ced03b400663b7c4bcde1cc40282b268782958c400906bf571e9cb0d711c4b339e2e881635422337ded64158a16f79493910e6c4b1d85cb9c9c8a1edc79084897e671d08c6dcc1371b4c3a1bee4d9284ce529ee2154938b8e2cdb7d656c8857fcf363b87299d82753efd3b2"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x0, 0x21, 0x0, @scatter={0x6, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfb", &(0x7f0000001980)=""/35, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:47 executing program 2: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080", 0x15}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:47 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) socket(0x2, 0x6, 0x0) lseek(r0, 0x200, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x10000) [ 153.941712][ T4768] loop2: detected capacity change from 0 to 262160 [ 153.963831][ T4768] FAT-fs (loop2): invalid media value (0x00) [ 153.969879][ T4768] FAT-fs (loop2): Can't find a valid FAT filesystem [ 154.070161][ T4770] loop3: detected capacity change from 0 to 262160 09:19:47 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:47 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x0, 0x22, 0x0, @scatter={0x6, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7", 0x0, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:47 executing program 0: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:47 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) socket(0x2, 0x6, 0x0) lseek(r0, 0x200, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x10000) [ 154.161120][ T4773] loop0: detected capacity change from 0 to 262160 [ 154.176845][ T4776] loop3: detected capacity change from 0 to 262160 09:19:47 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000000000000500000000000000050000000000000000000080002400000000000000080000000000000000040000020000000800000000000000ffffffffffffffff9a01000000000000ff0700000000090000000000000009000000000000000400000000000040000000ef70a888d8933d210000a815ff8c4bdec553660100be00335113328bec52ef522ced03b400663b7c4bcde1cc40282b268782958c400906bf571e9cb0d711c4b339e2e881635422337ded64158a16f79493910e6c4b1d85cb9c9c8a1edc79084897e671d08c6dcc1371b4c3a1bee4d9284ce529ee2154938b8e2cdb7d656c8857fcf363b87299d82753efd3b2"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x0, 0x22, 0x0, @scatter={0x6, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7", 0x0, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 154.233026][ T4778] loop5: detected capacity change from 0 to 262160 09:19:47 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) socket(0x2, 0x6, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:47 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x0, 0x22, 0x0, @scatter={0x6, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7", 0x0, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:47 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) socket(0x2, 0x6, 0x0) lseek(r0, 0x200, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x10000) 09:19:47 executing program 0: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:47 executing program 5: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x0, 0x22, 0x0, @scatter={0x6, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7", 0x0, 0x9, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:47 executing program 2: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080", 0x15}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) socket(0x2, 0x6, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:47 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x0, 0x22, 0x0, @scatter={0x6, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7", &(0x7f0000001980)=""/35, 0x0, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:47 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080", 0x15}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 154.550333][ T4784] loop3: detected capacity change from 0 to 262160 [ 154.557266][ T4785] loop0: detected capacity change from 0 to 262160 [ 154.572106][ T4791] loop2: detected capacity change from 0 to 262160 09:19:47 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) socket(0x2, 0x6, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 154.621344][ T4796] loop5: detected capacity change from 0 to 262160 [ 154.628390][ T4791] FAT-fs (loop2): invalid media value (0x00) [ 154.633393][ T4792] loop4: detected capacity change from 0 to 262160 [ 154.634486][ T4791] FAT-fs (loop2): Can't find a valid FAT filesystem 09:19:48 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000000000000500000000000000050000000000000000000080002400000000000000080000000000000000040000020000000800000000000000ffffffffffffffff9a01000000000000ff0700000000090000000000000009000000000000000400000000000040000000ef70a888d8933d210000a815ff8c4bdec553660100be00335113328bec52ef522ced03b400663b7c4bcde1cc40282b268782958c400906bf571e9cb0d711c4b339e2e881635422337ded64158a16f79493910e6c4b1d85cb9c9c8a1edc79084897e671d08c6dcc1371b4c3a1bee4d9284ce529ee2154938b8e2cdb7d656c8857fcf363b87299d82753efd3b2"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x0, 0x22, 0x0, @scatter={0x6, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7", &(0x7f0000001980)=""/35, 0x0, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 154.724818][ T4796] FAT-fs (loop5): invalid media value (0x00) [ 154.730900][ T4796] FAT-fs (loop5): Can't find a valid FAT filesystem [ 154.739747][ T4802] loop3: detected capacity change from 0 to 262160 09:19:48 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x0, 0x22, 0x0, @scatter={0x6, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7", &(0x7f0000001980)=""/35, 0x0, 0x20, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:48 executing program 2: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080", 0x15}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) socket(0x2, 0x6, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 154.856584][ T4809] loop2: detected capacity change from 0 to 262160 [ 154.879797][ T4809] FAT-fs (loop2): invalid media value (0x00) [ 154.885842][ T4809] FAT-fs (loop2): Can't find a valid FAT filesystem 09:19:48 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) socket(0x2, 0x6, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:48 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) socket(0x2, 0x6, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:48 executing program 0: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:48 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x0, 0x22, 0x0, @scatter={0x6, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7", &(0x7f0000001980)=""/35, 0x9, 0x0, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:48 executing program 2: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080", 0x15}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) socket(0x2, 0x6, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:48 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, 0x0) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) socket(0x2, 0x6, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:48 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x0, 0x22, 0x0, @scatter={0x6, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7", &(0x7f0000001980)=""/35, 0x9, 0x0, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 155.095578][ T4812] loop3: detected capacity change from 0 to 262160 [ 155.099478][ T4819] loop0: detected capacity change from 0 to 262160 [ 155.102420][ T4818] loop5: detected capacity change from 0 to 262160 [ 155.116576][ T4816] loop2: detected capacity change from 0 to 262160 09:19:48 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) socket(0x2, 0x6, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 155.180223][ T4822] loop4: detected capacity change from 0 to 262160 [ 155.200230][ T4816] FAT-fs (loop2): invalid media value (0x00) [ 155.206287][ T4816] FAT-fs (loop2): Can't find a valid FAT filesystem 09:19:48 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x0, 0x22, 0x0, @scatter={0x6, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7", &(0x7f0000001980)=""/35, 0x9, 0x0, 0xffffffffffffffff, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) [ 155.267005][ T4827] loop3: detected capacity change from 0 to 262160 09:19:48 executing program 0: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:48 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x0, 0x22, 0x0, @scatter={0x6, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7", &(0x7f0000001980)=""/35, 0x9, 0x20, 0x0, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:48 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 155.399052][ T4832] loop0: detected capacity change from 0 to 262160 [ 155.446481][ T4836] loop3: detected capacity change from 0 to 262160 09:19:49 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) socket(0x2, 0x6, 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:49 executing program 2: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080", 0x15}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x800) socket(0x2, 0x6, 0x0) lseek(0xffffffffffffffff, 0x200, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x10000) 09:19:49 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/227, 0xe3, 0xd6d) fallocate(r1, 0x8, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x400) inotify_init1(0x100800) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003840)={{}, 0x0, 0x6, @inherit={0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000000000000500000000000000050000000000000000000080002400000000000000080000000000000000040000020000000800000000000000ffffffffffffffff9a01000000000000ff0700000000090000000000000009000000000000000400000000000040000000ef70a888d8933d210000a815ff8c4bdec553660100be00335113328bec52ef522ced03b400663b7c4bcde1cc40282b268782958c400906bf571e9cb0d711c4b339e2e881635422337ded64158a16f79493910e6c4b1d85cb9c9c8a1edc79084897e671d08c6dcc1371b4c3a1bee4d9284ce529ee2154938b8e2cdb7d656c8857fcf363b87299d82753efd3b2"]}, @devid}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001a00)={0x53, 0x0, 0x22, 0x0, @scatter={0x6, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000040)=""/2, 0x2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/195, 0xc3}]}, &(0x7f0000000300)="032c287047405472280e8bfec13d36288c18b0b820b03bd1f8771ea47ad0e0fdfbb7", &(0x7f0000001980)=""/35, 0x9, 0x20, 0x0, &(0x7f00000019c0)}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x14) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001a80)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000001b00)='timers\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1, 0x500, 0x0) 09:19:49 executing program 0: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 09:19:49 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) lseek(r0, 0x200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 155.834724][ T4841] loop0: detected capacity change from 0 to 262160 [ 155.845769][ T4843] loop3: detected capacity change from 0 to 262160 [ 155.853448][ T4844] loop2: detected capacity change from 0 to 262160 [ 155.875117][ T4844] FAT-fs (loop2): invalid media value (0x00) 09:19:49 executing program 5: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="b0095d4144e3ec32ee8202198b9aecaf86c6555919989d804d3d82035bdee23a2e7f2fb9e70a357ac33b7b5548ff529aa7494091e1305c7fd2e635c19f81fd5e734430ef", 0x44}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffff