15=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r17 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r18 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r17, 0x4c81, r18) ioctl$LOOP_CTL_ADD(r17, 0x4c80, r18) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r18) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {}, {r7}, {r2}, {r3, r4}, {r3, r4}, {r10, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r16}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r8}, {0x0, r15}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r14, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {0x0, r4}, {r6, r4}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r12}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2}, {r3, r4}, {r3}, {r2, r4}, {r3}, {}, {r2, r4}, {}, {}, {r2}, {0x0, r4}, {r2}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r2, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r11}, {r3}, {r3}, {r9, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r13}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 830.995042][ C0] sd 0:0:1:0: tag#3614 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 831.004912][ C0] sd 0:0:1:0: tag#3614 CDB: opcode=0xe5 (vendor) [ 831.011244][ C0] sd 0:0:1:0: tag#3614 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 831.020303][ C0] sd 0:0:1:0: tag#3614 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 831.029347][ C0] sd 0:0:1:0: tag#3614 CDB[20]: ba [ 831.034515][ C0] sd 0:0:1:0: tag#3615 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 831.044513][ C0] sd 0:0:1:0: tag#3615 CDB: opcode=0xe5 (vendor) [ 831.050852][ C0] sd 0:0:1:0: tag#3615 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 831.059904][ C0] sd 0:0:1:0: tag#3615 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 831.068934][ C0] sd 0:0:1:0: tag#3615 CDB[20]: ba 18:12:54 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r3}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {r3}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {r2}, {r3, r4}, {0x0, r4}, {r7}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {r2}, {r3, r4}, {r3}, {0x0, r4}, {r3}, {}, {r2, r4}, {0x0, r4}, {}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {}, {r2}, {}, {r2}, {0x0, r4}, {r2}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {0x0, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) 18:12:54 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {0x0, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {0x0, r4}, {r7, r4}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2}, {r3, r4}, {r3}, {r2, r4}, {r3}, {}, {r2, r4}, {}, {}, {r2}, {0x0, r4}, {r2}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r2, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 831.204887][ T4991] FAT-fs (loop5): bogus number of reserved sectors [ 831.211511][ T4991] FAT-fs (loop5): Can't find a valid FAT filesystem 18:12:54 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) ioctl$LOOP_CTL_ADD(r19, 0x4c80, r20) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r12, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r18}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r17}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {r3, r5}, {}, {r3}, {r6, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r16, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r14}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3}, {}, {0x0, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3}, {r4, r5}, {r4}, {r3, r5}, {r4}, {}, {r3, r5}, {0x0, r5}, {}, {r3}, {0x0, r5}, {r3}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r13}, {r4}, {r4}, {r11, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4, r5}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r15}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4, r5}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 831.302824][ C1] sd 0:0:1:0: tag#3616 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 831.312680][ C1] sd 0:0:1:0: tag#3616 CDB: opcode=0xe5 (vendor) [ 831.319014][ C1] sd 0:0:1:0: tag#3616 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 831.328078][ C1] sd 0:0:1:0: tag#3616 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 831.337159][ C1] sd 0:0:1:0: tag#3616 CDB[20]: ba 18:12:54 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {0x0, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {0x0, r4}, {r7, r4}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2}, {r3, r4}, {r3}, {r2, r4}, {r3}, {}, {r2, r4}, {}, {}, {r2}, {0x0, r4}, {r2}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r2, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 831.415790][ C0] sd 0:0:1:0: tag#3617 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 831.425832][ C0] sd 0:0:1:0: tag#3617 CDB: opcode=0xe5 (vendor) [ 831.432292][ C0] sd 0:0:1:0: tag#3617 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 831.441420][ C0] sd 0:0:1:0: tag#3617 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 831.450467][ C0] sd 0:0:1:0: tag#3617 CDB[20]: ba 18:12:55 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r3}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {r3}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {r2}, {r3, r4}, {0x0, r4}, {r7}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {r2}, {r3, r4}, {r3}, {0x0, r4}, {r3}, {}, {r2, r4}, {0x0, r4}, {}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {}, {r2}, {}, {r2}, {0x0, r4}, {r2}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {0x0, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) 18:12:55 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r4}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) ioctl$LOOP_CTL_ADD(r19, 0x4c80, r20) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r12, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r18}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r4}, {r4}, {r4}, {}, {r3, r5}, {0x0, r10}, {0x0, r17}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {r3, r5}, {}, {r3}, {r6, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r16, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4}, {r3, r5}, {r4, r5}, {r14}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3}, {}, {0x0, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {}, {r3, r5}, {}, {}, {r3}, {r4, r5}, {r4}, {0x0, r5}, {r4}, {}, {r3, r5}, {0x0, r5}, {}, {r3}, {}, {r3}, {0x0, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {0x0, r5}, {r3}, {r13}, {r4}, {r4}, {r11, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r15}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 831.600104][ T5208] FAT-fs (loop5): bogus number of reserved sectors [ 831.606690][ T5208] FAT-fs (loop5): Can't find a valid FAT filesystem [ 831.677640][ T5210] FAT-fs (loop1): bogus number of reserved sectors [ 831.684466][ T5210] FAT-fs (loop1): Can't find a valid FAT filesystem [ 831.700754][ C0] sd 0:0:1:0: tag#3618 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 831.710606][ C0] sd 0:0:1:0: tag#3618 CDB: opcode=0xe5 (vendor) [ 831.716955][ C0] sd 0:0:1:0: tag#3618 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c 18:12:55 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r4}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r17 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r18 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r17, 0x4c81, r18) ioctl$LOOP_CTL_ADD(r17, 0x4c80, r18) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r18) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r6}, {r8}, {r3}, {r4, r5}, {r4, r5}, {r10, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r16}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r9}, {0x0, r15}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {r3, r5}, {}, {r3}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r14, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r7, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r12}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3}, {}, {r4, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {0x0, r5}, {r3, r5}, {r4}, {}, {r3}, {r4, r5}, {r4}, {r3, r5}, {r4}, {}, {r3, r5}, {}, {}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {}, {r3}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r11}, {r4}, {r4}, {0x0, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r13}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 18:12:55 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {0x0, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {0x0, r4}, {r7, r4}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2}, {r3, r4}, {r3}, {r2, r4}, {r3}, {}, {r2, r4}, {}, {}, {r2}, {0x0, r4}, {r2}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r2, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) 18:12:55 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r4}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r11, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r17}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r16}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {r3, r5}, {}, {r3}, {r6, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r15, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r13}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3}, {}, {r4, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {r3}, {r4, r5}, {r4}, {0x0, r5}, {r4}, {}, {r3, r5}, {0x0, r5}, {}, {r3}, {}, {r3}, {0x0, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {0x0, r5}, {r3}, {r12}, {r4}, {r4}, {0x0, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r14}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 831.725980][ C0] sd 0:0:1:0: tag#3618 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 831.735013][ C0] sd 0:0:1:0: tag#3618 CDB[20]: ba [ 831.776702][ C1] sd 0:0:1:0: tag#3619 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 831.786556][ C1] sd 0:0:1:0: tag#3619 CDB: opcode=0xe5 (vendor) [ 831.792926][ C1] sd 0:0:1:0: tag#3619 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 831.801956][ C1] sd 0:0:1:0: tag#3619 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 831.811000][ C1] sd 0:0:1:0: tag#3619 CDB[20]: ba 18:12:55 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r3}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {r3}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {r2}, {r3, r4}, {0x0, r4}, {r7}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {r2}, {r3, r4}, {r3}, {0x0, r4}, {r3}, {}, {r2, r4}, {0x0, r4}, {}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {}, {r2}, {}, {r2}, {0x0, r4}, {r2}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {0x0, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 831.831773][ T5216] FAT-fs (loop4): bogus number of reserved sectors [ 831.838385][ T5216] FAT-fs (loop4): Can't find a valid FAT filesystem [ 831.913880][ T5255] FAT-fs (loop5): bogus number of reserved sectors [ 831.920408][ T5255] FAT-fs (loop5): Can't find a valid FAT filesystem 18:12:55 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r3}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {r3}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {r2}, {r3, r4}, {0x0, r4}, {r7}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {r2}, {r3, r4}, {r3}, {0x0, r4}, {r3}, {}, {r2, r4}, {0x0, r4}, {}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {}, {r2}, {}, {r2}, {0x0, r4}, {r2}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {0x0, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) 18:12:55 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {0x0, r4}, {r7, r4}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2}, {r3, r4}, {r3}, {r2, r4}, {r3}, {}, {r2, r4}, {}, {}, {r2}, {0x0, r4}, {r2}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r2, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 832.081275][ T5326] FAT-fs (loop5): bogus number of reserved sectors [ 832.087834][ T5326] FAT-fs (loop5): Can't find a valid FAT filesystem 18:12:55 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) ioctl$LOOP_CTL_ADD(r19, 0x4c80, r20) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r12, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r18}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r17}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {r3, r5}, {}, {r3}, {r6, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r16, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r14}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3}, {}, {0x0, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3}, {r4, r5}, {r4}, {r3, r5}, {r4}, {}, {r3, r5}, {0x0, r5}, {}, {r3}, {0x0, r5}, {r3}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r13}, {r4}, {r4}, {r11, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4, r5}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r15}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4, r5}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) 18:12:55 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r3}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {r3}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {r2}, {r3, r4}, {0x0, r4}, {r7}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {r2}, {r3, r4}, {r3}, {0x0, r4}, {r3}, {}, {r2, r4}, {0x0, r4}, {}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {}, {r2}, {}, {r2}, {0x0, r4}, {r2}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {0x0, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) 18:12:55 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {0x0, r4}, {r7, r4}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2}, {r3, r4}, {r3}, {r2, r4}, {r3}, {}, {r2, r4}, {}, {}, {r2}, {0x0, r4}, {r2}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r2, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 832.311030][ T5429] FAT-fs (loop5): bogus number of reserved sectors [ 832.314807][ T5431] FAT-fs (loop0): bogus number of reserved sectors [ 832.317610][ T5429] FAT-fs (loop5): Can't find a valid FAT filesystem [ 832.324117][ T5431] FAT-fs (loop0): Can't find a valid FAT filesystem 18:12:55 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r3}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {r3}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {r2}, {r3, r4}, {0x0, r4}, {r7}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {r2}, {r3, r4}, {r3}, {0x0, r4}, {r3}, {}, {r2, r4}, {0x0, r4}, {}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {}, {r2}, {}, {r2}, {0x0, r4}, {r2}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {0x0, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}], 0x0, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 832.440992][ T1905] udevd[1905]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 832.478202][ T1905] udevd[1905]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory 18:12:55 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r4}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) ioctl$LOOP_CTL_ADD(r19, 0x4c80, r20) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r12, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r18}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r4}, {r4}, {r4}, {}, {r3, r5}, {0x0, r10}, {0x0, r17}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {r3, r5}, {}, {r3}, {r6, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r16, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4}, {r3, r5}, {r4, r5}, {r14}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3}, {}, {0x0, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {}, {r3, r5}, {}, {}, {r3}, {r4, r5}, {r4}, {0x0, r5}, {r4}, {}, {r3, r5}, {0x0, r5}, {}, {r3}, {}, {r3}, {0x0, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {0x0, r5}, {r3}, {r13}, {r4}, {r4}, {r11, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r15}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 832.521204][ T5525] FAT-fs (loop5): bogus number of reserved sectors [ 832.527768][ T5525] FAT-fs (loop5): Can't find a valid FAT filesystem 18:12:56 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {0x0, r4}, {r7, r4}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2}, {r3, r4}, {r3}, {r2, r4}, {r3}, {}, {r2, r4}, {}, {}, {r2}, {0x0, r4}, {r2}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r2, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 832.585819][ T5539] FAT-fs (loop1): bogus number of reserved sectors [ 832.592396][ T5539] FAT-fs (loop1): Can't find a valid FAT filesystem 18:12:56 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r4}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r17 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r18 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r17, 0x4c81, r18) ioctl$LOOP_CTL_ADD(r17, 0x4c80, r18) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r18) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r6}, {r8}, {r3}, {r4, r5}, {r4, r5}, {r10, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r16}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r9}, {0x0, r15}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {r3, r5}, {}, {r3}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r14, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r7, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r12}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3}, {}, {r4, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {0x0, r5}, {r3, r5}, {r4}, {}, {r3}, {r4, r5}, {r4}, {r3, r5}, {r4}, {}, {r3, r5}, {}, {}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {}, {r3}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r11}, {r4}, {r4}, {0x0, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r13}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 18:12:56 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r3}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {r3}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {r2}, {r3, r4}, {0x0, r4}, {r7}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {r2}, {r3, r4}, {r3}, {0x0, r4}, {r3}, {}, {r2, r4}, {0x0, r4}, {}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {}, {r2}, {}, {r2}, {0x0, r4}, {r2}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {0x0, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}], 0x0, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) 18:12:56 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r4}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r20) ioctl$LOOP_CTL_ADD(r19, 0x4c80, r20) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r12, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r18}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r17}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {r3, r5}, {}, {r3}, {r6, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r16, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r14}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3}, {}, {r4, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {r3}, {r4, r5}, {r4}, {0x0, r5}, {r4}, {}, {r3, r5}, {0x0, r5}, {}, {r3}, {}, {r3}, {0x0, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {0x0, r5}, {r3}, {r13}, {r4}, {r4}, {r11}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r15}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 832.761318][ T5544] FAT-fs (loop5): bogus number of reserved sectors [ 832.762293][ T5546] FAT-fs (loop4): bogus number of reserved sectors [ 832.767885][ T5544] FAT-fs (loop5): Can't find a valid FAT filesystem [ 832.774442][ T5546] FAT-fs (loop4): Can't find a valid FAT filesystem 18:12:56 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {0x0, r4}, {r7, r4}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2}, {r3, r4}, {r3}, {r2, r4}, {r3}, {}, {r2, r4}, {}, {}, {r2}, {0x0, r4}, {r2}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r2, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) 18:12:56 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r3}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {r3}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {r2}, {r3, r4}, {0x0, r4}, {r7}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {r2}, {r3, r4}, {r3}, {0x0, r4}, {r3}, {}, {r2, r4}, {0x0, r4}, {}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {}, {r2}, {}, {r2}, {0x0, r4}, {r2}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {0x0, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}], 0x0, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 833.018158][ T5707] FAT-fs (loop5): bogus number of reserved sectors [ 833.024856][ T5707] FAT-fs (loop5): Can't find a valid FAT filesystem 18:12:56 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {0x0, r4}, {r7, r4}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2}, {r3, r4}, {r3}, {r2, r4}, {r3}, {}, {r2, r4}, {}, {}, {r2}, {0x0, r4}, {r2}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r2, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) 18:12:56 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) ioctl$LOOP_CTL_ADD(r19, 0x4c80, r20) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r12, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r18}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r17}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {r3, r5}, {}, {r3}, {r6, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r16, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r14}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3}, {}, {r4}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3}, {r4, r5}, {r4}, {r3, r5}, {r4}, {}, {r3, r5}, {0x0, r5}, {}, {r3}, {0x0, r5}, {r3}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r13}, {r4}, {r4}, {r11, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4, r5}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r15}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4, r5}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) 18:12:56 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r3}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {r3}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {r2}, {r3, r4}, {0x0, r4}, {r7}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {r2}, {r3, r4}, {r3}, {0x0, r4}, {r3}, {}, {r2, r4}, {0x0, r4}, {}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {}, {r2}, {}, {r2}, {0x0, r4}, {r2}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {0x0, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 833.226475][ T5762] FAT-fs (loop0): bogus number of reserved sectors [ 833.233064][ T5762] FAT-fs (loop0): Can't find a valid FAT filesystem [ 833.261103][ T5774] FAT-fs (loop5): bogus number of reserved sectors [ 833.267715][ T5774] FAT-fs (loop5): Can't find a valid FAT filesystem 18:12:56 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {0x0, r4}, {r7, r4}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2}, {r3, r4}, {r3}, {r2, r4}, {r3}, {}, {r2, r4}, {}, {}, {r2}, {0x0, r4}, {r2}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r2, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) 18:12:56 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r3}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {r3}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {r2}, {r3, r4}, {0x0, r4}, {r7}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {r2}, {r3, r4}, {r3}, {0x0, r4}, {r3}, {}, {r2, r4}, {0x0, r4}, {}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {}, {r2}, {}, {r2}, {0x0, r4}, {r2}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {0x0, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 833.327339][ T1905] udevd[1905]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory 18:12:56 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r4}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) ioctl$LOOP_CTL_ADD(r19, 0x4c80, r20) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r12, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r18}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r4}, {r4}, {r4}, {}, {r3, r5}, {0x0, r10}, {0x0, r17}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {r3, r5}, {}, {r3}, {r6, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r16, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4}, {r3, r5}, {r4, r5}, {r14}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3}, {}, {0x0, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {}, {r3, r5}, {}, {}, {r3}, {r4, r5}, {r4}, {0x0, r5}, {r4}, {}, {r3, r5}, {0x0, r5}, {}, {r3}, {}, {r3}, {0x0, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {0x0, r5}, {r3}, {r13}, {r4}, {r4}, {r11, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r15}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 833.415322][ T5868] FAT-fs (loop5): bogus number of reserved sectors [ 833.421893][ T5868] FAT-fs (loop5): Can't find a valid FAT filesystem [ 833.466199][ T5881] FAT-fs (loop1): bogus number of reserved sectors [ 833.472776][ T5881] FAT-fs (loop1): Can't find a valid FAT filesystem 18:12:57 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {0x0, r4}, {r7, r4}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2}, {r3, r4}, {r3}, {r2, r4}, {r3}, {}, {r2, r4}, {}, {}, {r2}, {0x0, r4}, {r2}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r2, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) 18:12:57 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r4}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r17 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r18 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r17, 0x4c81, r18) ioctl$LOOP_CTL_ADD(r17, 0x4c80, r18) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r18) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r6}, {r8}, {r3}, {r4, r5}, {r4, r5}, {r10, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r16}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r9}, {0x0, r15}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {r3, r5}, {}, {r3}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r14, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r7, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r12}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3}, {}, {r4, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {0x0, r5}, {r3, r5}, {r4}, {}, {r3}, {r4, r5}, {r4}, {r3, r5}, {r4}, {}, {r3, r5}, {}, {}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {}, {r3}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r11}, {r4}, {r4}, {0x0, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r13}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 18:12:57 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r3}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {r3}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {r2}, {r3, r4}, {0x0, r4}, {r7}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {r2}, {r3, r4}, {r3}, {0x0, r4}, {r3}, {}, {r2, r4}, {0x0, r4}, {}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {}, {r2}, {}, {r2}, {0x0, r4}, {r2}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {0x0, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) 18:12:57 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r4}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r20) ioctl$LOOP_CTL_ADD(r19, 0x4c80, r20) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r12, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r18}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r17}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {r3, r5}, {}, {r3}, {r6, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r16, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r14}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3}, {}, {r4, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {r3}, {r4, r5}, {r4}, {0x0, r5}, {r4}, {}, {r3, r5}, {0x0, r5}, {}, {r3}, {}, {r3}, {0x0, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {0x0, r5}, {r3}, {r13}, {r4}, {r4}, {r11}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r15}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) 18:12:57 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {0x0, r4}, {r7, r4}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2}, {r3, r4}, {r3}, {r2, r4}, {r3}, {}, {r2, r4}, {}, {}, {r2}, {0x0, r4}, {r2}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r2, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 833.745720][ T6077] FAT-fs (loop5): bogus number of reserved sectors [ 833.752370][ T6077] FAT-fs (loop5): Can't find a valid FAT filesystem [ 833.761657][ T6079] FAT-fs (loop4): bogus number of reserved sectors [ 833.768221][ T6079] FAT-fs (loop4): Can't find a valid FAT filesystem 18:12:57 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r3}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {r3}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {r2}, {r3, r4}, {0x0, r4}, {r7}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {r2}, {r3, r4}, {r3}, {0x0, r4}, {r3}, {}, {r2, r4}, {0x0, r4}, {}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {}, {r2}, {}, {r2}, {0x0, r4}, {r2}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {0x0, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 833.872591][ T6087] FAT-fs (loop5): bogus number of reserved sectors [ 833.879131][ T6087] FAT-fs (loop5): Can't find a valid FAT filesystem 18:12:57 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {0x0, r4}, {r7, r4}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2}, {r3, r4}, {r3}, {r2, r4}, {r3}, {}, {r2, r4}, {}, {}, {r2}, {0x0, r4}, {r2}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r2, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) 18:12:57 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r3}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {r3}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {r2}, {r3, r4}, {0x0, r4}, {r7}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {r2}, {r3, r4}, {r3}, {0x0, r4}, {r3}, {}, {r2, r4}, {0x0, r4}, {}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {}, {r2}, {}, {r2}, {0x0, r4}, {r2}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {0x0, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) 18:12:57 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) ioctl$LOOP_CTL_ADD(r19, 0x4c80, r20) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r12, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r18}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r17}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {r3, r5}, {}, {r3}, {r6, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r16, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r14}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3}, {}, {r4}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3}, {r4, r5}, {r4}, {r3, r5}, {r4}, {}, {r3, r5}, {0x0, r5}, {}, {r3}, {0x0, r5}, {r3}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r13}, {r4}, {r4}, {r11, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4, r5}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r15}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4, r5}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 834.089509][ T6192] FAT-fs (loop5): bogus number of reserved sectors [ 834.096096][ T6192] FAT-fs (loop5): Can't find a valid FAT filesystem [ 834.119348][ T6194] FAT-fs (loop0): bogus number of reserved sectors [ 834.125937][ T6194] FAT-fs (loop0): Can't find a valid FAT filesystem 18:12:57 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r3}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {r3}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {r2}, {r3, r4}, {0x0, r4}, {r7}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {r2}, {r3, r4}, {r3}, {0x0, r4}, {r3}, {}, {r2, r4}, {0x0, r4}, {}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {}, {r2}, {}, {r2}, {0x0, r4}, {r2}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {0x0, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 834.198190][ T1905] udevd[1905]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory 18:12:57 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {0x0, r4}, {r7, r4}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2}, {r3, r4}, {r3}, {r2, r4}, {r3}, {}, {r2, r4}, {}, {}, {r2}, {0x0, r4}, {r2}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r2, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) 18:12:57 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r4}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) ioctl$LOOP_CTL_ADD(r19, 0x4c80, r20) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r12, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r18}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r4}, {}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r17}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {r3, r5}, {}, {r3}, {r6, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r16, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4}, {r3, r5}, {r4, r5}, {r14}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3}, {}, {0x0, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {}, {r3, r5}, {}, {}, {r3}, {r4, r5}, {r4}, {0x0, r5}, {r4}, {}, {r3, r5}, {0x0, r5}, {}, {r3}, {}, {r3}, {0x0, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {0x0, r5}, {r3}, {r13}, {r4}, {r4}, {r11, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r15}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 834.297629][ T6299] FAT-fs (loop5): bogus number of reserved sectors [ 834.304248][ T6299] FAT-fs (loop5): Can't find a valid FAT filesystem 18:12:57 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r3}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {r3}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {r2}, {r3, r4}, {0x0, r4}, {r7}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {r2}, {r3, r4}, {r3}, {0x0, r4}, {r3}, {}, {r2, r4}, {0x0, r4}, {}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {}, {r2}, {}, {r2}, {0x0, r4}, {r2}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {0x0, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa) open(0x0, 0xa8802, 0xcc) [ 834.396070][ T6303] FAT-fs (loop5): bogus number of reserved sectors [ 834.402627][ T6303] FAT-fs (loop5): Can't find a valid FAT filesystem [ 834.417345][ T6305] FAT-fs (loop1): bogus number of reserved sectors [ 834.423972][ T6305] FAT-fs (loop1): Can't find a valid FAT filesystem 18:12:58 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r4}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r11, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r17}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r16}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {r3, r5}, {}, {r3}, {r6}, {r4}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r15, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r13}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3}, {}, {r4, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {0x0, r5}, {r3, r5}, {r4}, {}, {r3}, {r4, r5}, {r4}, {r3, r5}, {r4}, {}, {r3, r5}, {}, {}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {}, {r3}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r12}, {r4}, {r4}, {0x0, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r14}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 18:12:58 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r3}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {r3}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {r2}, {r3, r4}, {0x0, r4}, {r7}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {r2}, {r3, r4}, {r3}, {0x0, r4}, {r3}, {}, {r2, r4}, {0x0, r4}, {}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {}, {r2}, {}, {r2}, {0x0, r4}, {r2}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {0x0, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa) open(0x0, 0xa8802, 0xcc) 18:12:58 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r4}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r20) ioctl$LOOP_CTL_ADD(r19, 0x4c80, r20) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r12, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r18}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r17}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {r3, r5}, {}, {r3}, {r6, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r16, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r14}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3}, {}, {r4, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {r3}, {r4, r5}, {r4}, {0x0, r5}, {r4}, {}, {r3, r5}, {0x0, r5}, {}, {r3}, {}, {r3}, {0x0, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {0x0, r5}, {r3}, {r13}, {r4}, {r4}, {r11}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r15}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) 18:12:58 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {0x0, r4}, {r7, r4}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2}, {r3, r4}, {r3}, {r2, r4}, {r3}, {}, {r2, r4}, {}, {}, {r2}, {0x0, r4}, {r2}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r2, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) 18:12:58 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {0x0, r4}, {r7, r4}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2}, {r3, r4}, {r3}, {r2, r4}, {r3}, {}, {r2, r4}, {}, {}, {r2}, {0x0, r4}, {r2}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r2, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 834.731603][ T6414] FAT-fs (loop4): bogus number of reserved sectors [ 834.738180][ T6414] FAT-fs (loop4): Can't find a valid FAT filesystem [ 834.738835][ T6411] FAT-fs (loop5): bogus number of reserved sectors [ 834.751296][ T6411] FAT-fs (loop5): Can't find a valid FAT filesystem 18:12:58 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r3}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {r3}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {r2}, {r3, r4}, {0x0, r4}, {r7}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {r2}, {r3, r4}, {r3}, {0x0, r4}, {r3}, {}, {r2, r4}, {0x0, r4}, {}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {}, {r2}, {}, {r2}, {0x0, r4}, {r2}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {0x0, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa) open(0x0, 0xa8802, 0xcc) 18:12:58 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) ioctl$LOOP_CTL_ADD(r19, 0x4c80, r20) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r12, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r18}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r17}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {r3, r5}, {}, {r3}, {r6, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r16, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r14}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3}, {}, {r4}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3}, {r4, r5}, {r4}, {r3, r5}, {r4}, {}, {r3, r5}, {0x0, r5}, {}, {r3}, {0x0, r5}, {r3}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r13}, {r4}, {r4}, {r11, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4, r5}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r15}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4, r5}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 834.951583][ T6589] FAT-fs (loop5): bogus number of reserved sectors [ 834.958164][ T6589] FAT-fs (loop5): Can't find a valid FAT filesystem 18:12:58 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r3}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {r3}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {r2}, {r3, r4}, {0x0, r4}, {r7}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {r2}, {r3, r4}, {r3}, {0x0, r4}, {r3}, {}, {r2, r4}, {0x0, r4}, {}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {}, {r2}, {}, {r2}, {0x0, r4}, {r2}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {0x0, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0x0, 0xcc) [ 835.026972][ T6627] FAT-fs (loop0): bogus number of reserved sectors [ 835.033537][ T6627] FAT-fs (loop0): Can't find a valid FAT filesystem 18:12:58 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {0x0, r4}, {r7, r4}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2}, {r3, r4}, {r3}, {r2, r4}, {r3}, {}, {r2, r4}, {}, {}, {r2}, {0x0, r4}, {r2}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r2, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 835.102441][ T6629] FAT-fs (loop5): bogus number of reserved sectors [ 835.109086][ T6629] FAT-fs (loop5): Can't find a valid FAT filesystem 18:12:58 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r3}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {r3}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {r2}, {r3, r4}, {0x0, r4}, {r7}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {r2}, {r3, r4}, {r3}, {0x0, r4}, {r3}, {}, {r2, r4}, {0x0, r4}, {}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {}, {r2}, {}, {r2}, {0x0, r4}, {r2}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {0x0, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0x0, 0xcc) 18:12:58 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r4}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) ioctl$LOOP_CTL_ADD(r19, 0x4c80, r20) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r12, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r18}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r4}, {}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r17}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {r3, r5}, {}, {r3}, {r6, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r16, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4}, {r3, r5}, {r4, r5}, {r14}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3}, {}, {0x0, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {}, {r3, r5}, {}, {}, {r3}, {r4, r5}, {r4}, {0x0, r5}, {r4}, {}, {r3, r5}, {0x0, r5}, {}, {r3}, {}, {r3}, {0x0, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {0x0, r5}, {r3}, {r13}, {r4}, {r4}, {r11, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r15}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 835.291494][ T6736] FAT-fs (loop5): bogus number of reserved sectors [ 835.298108][ T6736] FAT-fs (loop5): Can't find a valid FAT filesystem [ 835.317568][ T6738] FAT-fs (loop1): bogus number of reserved sectors [ 835.324213][ T6738] FAT-fs (loop1): Can't find a valid FAT filesystem 18:12:58 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {0x0, r4}, {r7, r4}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2}, {r3, r4}, {r3}, {r2, r4}, {r3}, {}, {r2, r4}, {}, {}, {r2}, {0x0, r4}, {r2}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r2, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) 18:12:59 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r3}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {r3}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {r2}, {r3, r4}, {0x0, r4}, {r7}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {r2}, {r3, r4}, {r3}, {0x0, r4}, {r3}, {}, {r2, r4}, {0x0, r4}, {}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {}, {r2}, {}, {r2}, {0x0, r4}, {r2}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {0x0, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0x0, 0xcc) 18:12:59 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r4}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r11, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r17}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r16}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {r3, r5}, {}, {r3}, {r6}, {r4}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r15, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r13}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3}, {}, {r4, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {0x0, r5}, {r3, r5}, {r4}, {}, {r3}, {r4, r5}, {r4}, {r3, r5}, {r4}, {}, {r3, r5}, {}, {}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {}, {r3}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r12}, {r4}, {r4}, {0x0, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r14}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 18:12:59 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r4}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r20) ioctl$LOOP_CTL_ADD(r19, 0x4c80, r20) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r12, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r18}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r17}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {r3, r5}, {}, {r3}, {r6, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r16, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r14}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3}, {}, {r4, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {r3}, {r4, r5}, {r4}, {0x0, r5}, {r4}, {}, {r3, r5}, {0x0, r5}, {}, {r3}, {}, {r3}, {0x0, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {0x0, r5}, {r3}, {r13}, {r4}, {}, {r11, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r15}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) 18:12:59 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {0x0, r4}, {r7, r4}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2}, {r3, r4}, {r3}, {r2, r4}, {r3}, {}, {r2, r4}, {}, {}, {r2}, {0x0, r4}, {r2}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r2, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 835.702095][ T6845] FAT-fs (loop5): bogus number of reserved sectors [ 835.708676][ T6845] FAT-fs (loop5): Can't find a valid FAT filesystem [ 835.726328][ T6848] FAT-fs (loop4): bogus number of reserved sectors [ 835.732891][ T6848] FAT-fs (loop4): Can't find a valid FAT filesystem 18:12:59 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r3}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {r3}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {r2}, {r3, r4}, {0x0, r4}, {r7}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {r2}, {r3, r4}, {r3}, {0x0, r4}, {r3}, {}, {r2, r4}, {0x0, r4}, {}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {}, {r2}, {}, {r2}, {0x0, r4}, {r2}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {0x0, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0x0) [ 835.799814][ C1] scsi_io_completion_action: 29 callbacks suppressed [ 835.799858][ C1] sd 0:0:1:0: tag#3589 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 835.816413][ C1] sd 0:0:1:0: tag#3589 CDB: opcode=0xe5 (vendor) [ 835.822793][ C1] sd 0:0:1:0: tag#3589 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 835.831847][ C1] sd 0:0:1:0: tag#3589 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 835.840903][ C1] sd 0:0:1:0: tag#3589 CDB[20]: ba 18:12:59 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) ioctl$LOOP_CTL_ADD(r19, 0x4c80, r20) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r12, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r18}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r17}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {r3, r5}, {}, {r3}, {r6, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r16, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r14}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {}, {r4, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3}, {r4, r5}, {r4}, {r3, r5}, {r4}, {}, {r3, r5}, {0x0, r5}, {}, {r3}, {0x0, r5}, {r3}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r13}, {r4}, {r4}, {r11, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4, r5}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r15}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4, r5}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 835.863850][ C1] sd 0:0:1:0: tag#3590 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 835.873710][ C1] sd 0:0:1:0: tag#3590 CDB: opcode=0xe5 (vendor) [ 835.880044][ C1] sd 0:0:1:0: tag#3590 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 835.889367][ C1] sd 0:0:1:0: tag#3590 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 835.898429][ C1] sd 0:0:1:0: tag#3590 CDB[20]: ba [ 835.912284][ T6933] FAT-fs (loop5): bogus number of reserved sectors [ 835.919110][ T6933] FAT-fs (loop5): Can't find a valid FAT filesystem [ 835.929572][ T6936] FAT-fs (loop0): bogus number of reserved sectors [ 835.936206][ T6936] FAT-fs (loop0): Can't find a valid FAT filesystem [ 836.005649][ C1] sd 0:0:1:0: tag#3591 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 836.015530][ C1] sd 0:0:1:0: tag#3591 CDB: opcode=0xe5 (vendor) [ 836.021912][ C1] sd 0:0:1:0: tag#3591 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 836.030965][ C1] sd 0:0:1:0: tag#3591 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 836.040005][ C1] sd 0:0:1:0: tag#3591 CDB[20]: ba 18:12:59 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {0x0, r4}, {r7, r4}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2}, {r3, r4}, {r3}, {r2, r4}, {r3}, {}, {r2, r4}, {}, {}, {r2}, {0x0, r4}, {r2}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r2, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 836.046367][ C0] sd 0:0:1:0: tag#3592 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 836.056232][ C0] sd 0:0:1:0: tag#3592 CDB: opcode=0xe5 (vendor) [ 836.062587][ C0] sd 0:0:1:0: tag#3592 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 836.071618][ C0] sd 0:0:1:0: tag#3592 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 836.080663][ C0] sd 0:0:1:0: tag#3592 CDB[20]: ba [ 836.093789][ T1905] udevd[1905]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory 18:12:59 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r3}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {r3}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {r2}, {r3, r4}, {0x0, r4}, {r7}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {r2}, {r3, r4}, {r3}, {0x0, r4}, {r3}, {}, {r2, r4}, {0x0, r4}, {}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {}, {r2}, {}, {r2}, {0x0, r4}, {r2}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {0x0, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0x0) 18:12:59 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r4}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) ioctl$LOOP_CTL_ADD(r19, 0x4c80, r20) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r12, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r18}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r4}, {}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r17}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {r3, r5}, {}, {r3}, {r6, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r16, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4}, {r3, r5}, {r4, r5}, {r14}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3}, {}, {0x0, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {}, {r3, r5}, {}, {}, {r3}, {r4, r5}, {r4}, {0x0, r5}, {r4}, {}, {r3, r5}, {0x0, r5}, {}, {r3}, {}, {r3}, {0x0, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {0x0, r5}, {r3}, {r13}, {r4}, {r4}, {r11, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r15}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 836.130451][ T1905] udevd[1905]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 836.163032][ T6961] FAT-fs (loop5): bogus number of reserved sectors [ 836.169559][ T6961] FAT-fs (loop5): Can't find a valid FAT filesystem [ 836.219983][ T7006] FAT-fs (loop1): bogus number of reserved sectors [ 836.226577][ T7006] FAT-fs (loop1): Can't find a valid FAT filesystem [ 836.259473][ C0] sd 0:0:1:0: tag#3593 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 836.269359][ C0] sd 0:0:1:0: tag#3593 CDB: opcode=0xe5 (vendor) [ 836.275711][ C0] sd 0:0:1:0: tag#3593 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 836.284751][ C0] sd 0:0:1:0: tag#3593 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 836.293796][ C0] sd 0:0:1:0: tag#3593 CDB[20]: ba 18:12:59 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {0x0, r4}, {r7, r4}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2}, {r3, r4}, {r3}, {r2, r4}, {r3}, {}, {r2, r4}, {}, {}, {r2}, {0x0, r4}, {r2}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r2, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 836.313981][ C1] sd 0:0:1:0: tag#3594 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 836.323852][ C1] sd 0:0:1:0: tag#3594 CDB: opcode=0xe5 (vendor) [ 836.330185][ C1] sd 0:0:1:0: tag#3594 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 836.339240][ C1] sd 0:0:1:0: tag#3594 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 836.348305][ C1] sd 0:0:1:0: tag#3594 CDB[20]: ba 18:12:59 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r3}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {r3}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {r2}, {r3, r4}, {0x0, r4}, {r7}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {r2}, {r3, r4}, {r3}, {0x0, r4}, {r3}, {}, {r2, r4}, {0x0, r4}, {}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {}, {r2}, {}, {r2}, {0x0, r4}, {r2}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {0x0, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0x0) 18:13:00 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r4}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r20) ioctl$LOOP_CTL_ADD(r19, 0x4c80, r20) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r12, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r18}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r17}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {r3, r5}, {}, {r3}, {r6, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r16, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r14}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3}, {}, {r4, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {r3}, {r4, r5}, {r4}, {0x0, r5}, {r4}, {}, {r3, r5}, {0x0, r5}, {}, {r3}, {}, {r3}, {0x0, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {0x0, r5}, {r3}, {r13}, {r4}, {}, {r11, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r15}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 836.531187][ T7166] FAT-fs (loop5): bogus number of reserved sectors [ 836.537755][ T7166] FAT-fs (loop5): Can't find a valid FAT filesystem [ 836.584789][ C0] sd 0:0:1:0: tag#3595 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 836.594757][ C0] sd 0:0:1:0: tag#3595 CDB: opcode=0xe5 (vendor) [ 836.601096][ C0] sd 0:0:1:0: tag#3595 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 836.610140][ C0] sd 0:0:1:0: tag#3595 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 836.619201][ C0] sd 0:0:1:0: tag#3595 CDB[20]: ba [ 836.633146][ T7175] FAT-fs (loop4): bogus number of reserved sectors [ 836.639679][ T7175] FAT-fs (loop4): Can't find a valid FAT filesystem [ 836.674583][ C1] sd 0:0:1:0: tag#3596 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s 18:13:00 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r4}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r11, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r17}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r16}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {r3, r5}, {}, {r3}, {r6}, {r4}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r15, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r13}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3}, {}, {r4, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {0x0, r5}, {r3, r5}, {r4}, {}, {r3}, {r4, r5}, {r4}, {r3, r5}, {r4}, {}, {r3, r5}, {}, {}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {}, {r3}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r12}, {r4}, {r4}, {0x0, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r14}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 18:13:00 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {0x0, r4}, {r7, r4}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2}, {r3, r4}, {r3}, {r2, r4}, {r3}, {}, {r2, r4}, {}, {}, {r2}, {0x0, r4}, {r2}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r2, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 836.684453][ C1] sd 0:0:1:0: tag#3596 CDB: opcode=0xe5 (vendor) [ 836.690799][ C1] sd 0:0:1:0: tag#3596 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 836.699847][ C1] sd 0:0:1:0: tag#3596 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 836.708881][ C1] sd 0:0:1:0: tag#3596 CDB[20]: ba 18:13:00 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) ioctl$LOOP_CTL_ADD(r19, 0x4c80, r20) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r12, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r18}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r17}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {r3, r5}, {}, {r3}, {r6, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r16, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r14}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {}, {r4, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3}, {r4, r5}, {r4}, {r3, r5}, {r4}, {}, {r3, r5}, {0x0, r5}, {}, {r3}, {0x0, r5}, {r3}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r13}, {r4}, {r4}, {r11, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4, r5}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r15}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4, r5}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) 18:13:00 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r3}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {r3}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {r2}, {r3, r4}, {0x0, r4}, {r7}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {r2}, {r3, r4}, {r3}, {0x0, r4}, {r3}, {}, {r2, r4}, {0x0, r4}, {}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {}, {r2}, {}, {r2}, {0x0, r4}, {r2}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {0x0, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0x0) [ 836.814070][ C0] sd 0:0:1:0: tag#3597 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 836.823950][ C0] sd 0:0:1:0: tag#3597 CDB: opcode=0xe5 (vendor) [ 836.830321][ C0] sd 0:0:1:0: tag#3597 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 836.839372][ C0] sd 0:0:1:0: tag#3597 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 836.845314][ T1905] udevd[1905]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 836.848408][ C0] sd 0:0:1:0: tag#3597 CDB[20]: ba [ 836.867833][ T7196] FAT-fs (loop5): bogus number of reserved sectors [ 836.874375][ T7196] FAT-fs (loop5): Can't find a valid FAT filesystem 18:13:00 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {0x0, r4}, {r7, r4}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2}, {r3, r4}, {r3}, {r2, r4}, {r3}, {}, {r2, r4}, {}, {}, {r2}, {0x0, r4}, {r2}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r2, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) 18:13:00 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) ioctl$LOOP_CTL_ADD(r19, 0x4c80, r20) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r12, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r18}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r17}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {r3, r5}, {}, {r3}, {r6, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r16, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r14}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {}, {r4, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3}, {r4, r5}, {r4}, {r3, r5}, {r4}, {}, {r3, r5}, {0x0, r5}, {}, {r3}, {0x0, r5}, {r3}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r13}, {r4}, {r4}, {r11, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4, r5}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r15}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4, r5}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 836.968923][ C1] sd 0:0:1:0: tag#3598 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 836.978808][ C1] sd 0:0:1:0: tag#3598 CDB: opcode=0xe5 (vendor) [ 836.985200][ C1] sd 0:0:1:0: tag#3598 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 836.994327][ C1] sd 0:0:1:0: tag#3598 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 837.003376][ C1] sd 0:0:1:0: tag#3598 CDB[20]: ba 18:13:00 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r4}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) ioctl$LOOP_CTL_ADD(r19, 0x4c80, r20) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r12, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r18}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r17}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {r3, r5}, {}, {r3}, {r6, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r16, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4}, {r3, r5}, {r4, r5}, {r14}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3}, {}, {0x0, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {}, {r3, r5}, {}, {}, {r3}, {r4, r5}, {r4}, {0x0, r5}, {r4}, {}, {r3, r5}, {0x0, r5}, {}, {r3}, {}, {r3}, {0x0, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {0x0, r5}, {r3}, {r13}, {r4}, {r4}, {r11, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r15}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 837.106130][ T7292] FAT-fs (loop5): bogus number of reserved sectors [ 837.112716][ T7292] FAT-fs (loop5): Can't find a valid FAT filesystem [ 837.162899][ T7294] FAT-fs (loop1): bogus number of reserved sectors [ 837.169441][ T7294] FAT-fs (loop1): Can't find a valid FAT filesystem 18:13:00 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {0x0, r4}, {r7, r4}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2}, {r3, r4}, {r3}, {r2, r4}, {r3}, {}, {r2, r4}, {}, {}, {r2}, {0x0, r4}, {r2}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r2, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) 18:13:00 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r4}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r20) ioctl$LOOP_CTL_ADD(r19, 0x4c80, r20) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r12, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r18}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r17}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {r3, r5}, {}, {r3}, {r6, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r16, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r14}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3}, {}, {r4, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {r3}, {r4, r5}, {r4}, {0x0, r5}, {r4}, {}, {r3, r5}, {0x0, r5}, {}, {r3}, {}, {r3}, {0x0, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {0x0, r5}, {r3}, {r13}, {r4}, {}, {r11, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r15}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 837.522948][ T7490] FAT-fs (loop4): bogus number of reserved sectors [ 837.529523][ T7490] FAT-fs (loop4): Can't find a valid FAT filesystem 18:13:01 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {0x0, r4}, {r7, r4}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2}, {r3, r4}, {r3}, {r2, r4}, {r3}, {}, {r2, r4}, {}, {}, {r2}, {0x0, r4}, {r2}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r2, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) 18:13:01 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) ioctl$LOOP_CTL_ADD(r19, 0x4c80, r20) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r12, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r18}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r17}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {r3, r5}, {}, {r3}, {r6, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r16, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r14}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {}, {r4, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3}, {r4, r5}, {r4}, {r3, r5}, {r4}, {}, {r3, r5}, {0x0, r5}, {}, {r3}, {0x0, r5}, {r3}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r13}, {r4}, {r4}, {r11, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4, r5}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r15}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4, r5}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) 18:13:01 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r4}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r11, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r17}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r16}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {r3, r5}, {}, {}, {r6, r5}, {r4}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r15, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r13}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3}, {}, {r4, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {0x0, r5}, {r3, r5}, {r4}, {}, {r3}, {r4, r5}, {r4}, {r3, r5}, {r4}, {}, {r3, r5}, {}, {}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {}, {r3}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r12}, {r4}, {r4}, {0x0, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r14}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 18:13:01 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {0x0, r4}, {r7, r4}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2}, {r3, r4}, {r3}, {r2, r4}, {r3}, {}, {r2, r4}, {}, {}, {r2}, {0x0, r4}, {r2}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r2, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) 18:13:01 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r4}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) ioctl$LOOP_CTL_ADD(r19, 0x4c80, r20) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r12, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r18}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r17}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {r3, r5}, {}, {r3}, {r6, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r16, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4}, {r3, r5}, {r4, r5}, {r14}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3}, {}, {0x0, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {}, {r3, r5}, {}, {}, {r3}, {r4, r5}, {r4}, {0x0, r5}, {r4}, {}, {r3, r5}, {0x0, r5}, {}, {r3}, {}, {r3}, {0x0, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {0x0, r5}, {r3}, {r13}, {r4}, {r4}, {r11, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r15}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) 18:13:01 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r3}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {r3}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {r2}, {r3, r4}, {0x0, r4}, {r7}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {r2}, {r3, r4}, {r3}, {0x0, r4}, {r3}, {}, {r2, r4}, {0x0, r4}, {}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {}, {r2}, {}, {r2}, {0x0, r4}, {r2}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {0x0, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0x0) [ 838.055396][ T7619] FAT-fs (loop1): bogus number of reserved sectors [ 838.061967][ T7619] FAT-fs (loop1): Can't find a valid FAT filesystem 18:13:01 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {0x0, r4}, {r7, r4}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2}, {r3, r4}, {r3}, {r2, r4}, {r3}, {}, {r2, r4}, {}, {}, {r2}, {0x0, r4}, {r2}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r2, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 838.109716][ T7660] FAT-fs (loop5): bogus number of reserved sectors [ 838.116281][ T7660] FAT-fs (loop5): Can't find a valid FAT filesystem 18:13:01 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r3}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {r3}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {r2}, {r3, r4}, {0x0, r4}, {r7}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {r2}, {r3, r4}, {r3}, {0x0, r4}, {r3}, {}, {r2, r4}, {0x0, r4}, {}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {}, {r2}, {}, {r2}, {0x0, r4}, {r2}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {0x0, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0x0) [ 838.243669][ T7726] FAT-fs (loop5): bogus number of reserved sectors [ 838.250226][ T7726] FAT-fs (loop5): Can't find a valid FAT filesystem 18:13:01 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r4}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r20) ioctl$LOOP_CTL_ADD(r19, 0x4c80, r20) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r12, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r18}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r17}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {r3, r5}, {}, {r3}, {r6, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r16, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r14}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3}, {}, {r4, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {r3}, {r4, r5}, {r4}, {0x0, r5}, {r4}, {}, {r3, r5}, {0x0, r5}, {}, {r3}, {}, {r3}, {0x0, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {0x0, r5}, {r3}, {r13}, {}, {r4}, {r11, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r15}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) 18:13:01 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r3}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {r3}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {r2}, {r3, r4}, {0x0, r4}, {r7}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {r2}, {r3, r4}, {r3}, {0x0, r4}, {r3}, {}, {r2, r4}, {0x0, r4}, {}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {}, {r2}, {}, {r2}, {0x0, r4}, {r2}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {0x0, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0x0) 18:13:01 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {0x0, r4}, {r7, r4}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2}, {r3, r4}, {r3}, {r2, r4}, {r3}, {}, {r2, r4}, {}, {}, {r2}, {0x0, r4}, {r2}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r2, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 838.415875][ T7829] FAT-fs (loop4): bogus number of reserved sectors [ 838.422488][ T7829] FAT-fs (loop4): Can't find a valid FAT filesystem [ 838.461593][ T7831] FAT-fs (loop5): bogus number of reserved sectors [ 838.468254][ T7831] FAT-fs (loop5): Can't find a valid FAT filesystem 18:13:01 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) ioctl$LOOP_CTL_ADD(r19, 0x4c80, r20) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r12, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r18}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r17}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {r3, r5}, {}, {r3}, {r6, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r16, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r14}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3}, {}, {r4, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3}, {r4, r5}, {r4}, {r3, r5}, {r4}, {}, {r3, r5}, {0x0, r5}, {}, {r3}, {0x0, r5}, {r3}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r13}, {r4}, {r4}, {r11, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4, r5}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r15}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4, r5}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) 18:13:02 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {0x0, r4}, {r7, r4}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2}, {r3, r4}, {r3}, {r2, r4}, {r3}, {}, {r2, r4}, {}, {}, {r2}, {0x0, r4}, {r2}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r2, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) 18:13:02 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {0x0, r4}, {r7, r4}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2}, {r3, r4}, {r3}, {r2, r4}, {r3}, {}, {r2, r4}, {}, {}, {r2}, {0x0, r4}, {r2}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r2, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 838.687654][ T7947] FAT-fs (loop5): bogus number of reserved sectors [ 838.694231][ T7947] FAT-fs (loop5): Can't find a valid FAT filesystem 18:13:02 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r4}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) ioctl$LOOP_CTL_ADD(r19, 0x4c80, r20) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r12, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r18}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r17}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {r3, r5}, {}, {r3}, {r6, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r16, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4}, {r3, r5}, {r4, r5}, {r14}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3}, {}, {0x0, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {}, {r3, r5}, {}, {}, {r3}, {r4, r5}, {r4}, {0x0, r5}, {r4}, {}, {r3, r5}, {0x0, r5}, {}, {r3}, {}, {r3}, {0x0, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {0x0, r5}, {r3}, {r13}, {r4}, {r4}, {r11, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r15}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) 18:13:02 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r4}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r11, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r17}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r16}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {r3, r5}, {}, {}, {r6, r5}, {r4}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r15, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r13}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3}, {}, {r4, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {0x0, r5}, {r3, r5}, {r4}, {}, {r3}, {r4, r5}, {r4}, {r3, r5}, {r4}, {}, {r3, r5}, {}, {}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {}, {r3}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r12}, {r4}, {r4}, {0x0, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r14}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 18:13:02 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {0x0, r4}, {r7, r4}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2}, {r3, r4}, {r3}, {r2, r4}, {r3}, {}, {r2, r4}, {}, {}, {r2}, {0x0, r4}, {r2}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r2, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 838.943993][ T8050] FAT-fs (loop1): bogus number of reserved sectors [ 838.950540][ T8050] FAT-fs (loop1): Can't find a valid FAT filesystem 18:13:02 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {0x0, r4}, {r7, r4}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2}, {r3, r4}, {r3}, {r2, r4}, {r3}, {}, {r2, r4}, {}, {}, {r2}, {0x0, r4}, {r2}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r2, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) 18:13:02 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r4}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r20) ioctl$LOOP_CTL_ADD(r19, 0x4c80, r20) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r12, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r18}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r17}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {r3, r5}, {}, {r3}, {r6, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r16, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r14}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3}, {}, {r4, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {r3}, {r4, r5}, {r4}, {0x0, r5}, {r4}, {}, {r3, r5}, {0x0, r5}, {}, {r3}, {}, {r3}, {0x0, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {0x0, r5}, {r3}, {r13}, {}, {r4}, {r11, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r15}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 839.301348][ T8159] FAT-fs (loop4): bogus number of reserved sectors [ 839.307919][ T8159] FAT-fs (loop4): Can't find a valid FAT filesystem 18:13:02 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) ioctl$LOOP_CTL_ADD(r19, 0x4c80, r20) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r12, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r18}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r17}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {r3, r5}, {}, {r3}, {r6, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r16, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r14}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3}, {}, {r4, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3}, {r4, r5}, {r4}, {r3, r5}, {r4}, {}, {r3, r5}, {0x0, r5}, {}, {r3}, {0x0, r5}, {r3}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r13}, {r4}, {r4}, {r11, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4, r5}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r15}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4, r5}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) 18:13:02 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {0x0, r4}, {r7, r4}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2}, {r3, r4}, {r3}, {r2, r4}, {r3}, {}, {r2, r4}, {}, {}, {r2}, {0x0, r4}, {r2}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r2, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 839.489756][ T8262] FAT-fs (loop0): bogus number of reserved sectors [ 839.496540][ T8262] FAT-fs (loop0): Can't find a valid FAT filesystem 18:13:03 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r3}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r18, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {r3}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {r2}, {r3, r4}, {0x0, r4}, {r7}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {r2}, {r3, r4}, {r3}, {0x0, r4}, {r3}, {}, {r2, r4}, {0x0, r4}, {}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {}, {r2}, {}, {r2}, {0x0, r4}, {r2}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {0x0, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 839.586118][ T1905] udevd[1905]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 839.651339][ T8305] FAT-fs (loop5): bogus number of reserved sectors [ 839.658026][ T8305] FAT-fs (loop5): Can't find a valid FAT filesystem 18:13:03 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {0x0, r4}, {r7, r4}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2}, {r3, r4}, {r3}, {r2, r4}, {r3}, {}, {r2, r4}, {}, {}, {r2}, {0x0, r4}, {r2}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r2, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) 18:13:03 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r4}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) ioctl$LOOP_CTL_ADD(r19, 0x4c80, r20) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r12, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r18}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r3, r5}, {0x0, r5}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r17}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {r3, r5}, {}, {r3}, {r6, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r16, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4}, {r3, r5}, {r4, r5}, {r14}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3}, {}, {0x0, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {}, {r3, r5}, {}, {}, {r3}, {r4, r5}, {r4}, {0x0, r5}, {r4}, {}, {r3, r5}, {0x0, r5}, {}, {r3}, {}, {r3}, {0x0, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {0x0, r5}, {r3}, {r13}, {r4}, {r4}, {r11, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r15}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) 18:13:03 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r4}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r20) ioctl$LOOP_CTL_ADD(r19, 0x4c80, r20) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r12, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r18}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r17}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {r3, r5}, {}, {r3}, {r6, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r16, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r14}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3}, {}, {r4, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {r3}, {r4, r5}, {r4}, {0x0, r5}, {r4}, {}, {r3, r5}, {0x0, r5}, {}, {r3}, {}, {r3}, {0x0, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {0x0, r5}, {r3}, {r13}, {r4}, {r4}, {r11}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r15}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 839.830408][ T8372] FAT-fs (loop1): bogus number of reserved sectors [ 839.836983][ T8372] FAT-fs (loop1): Can't find a valid FAT filesystem [ 839.868806][ T8374] FAT-fs (loop5): bogus number of reserved sectors [ 839.875372][ T8374] FAT-fs (loop5): Can't find a valid FAT filesystem 18:13:03 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {0x0, r4}, {r7, r4}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2}, {r3, r4}, {r3}, {r2, r4}, {r3}, {}, {r2, r4}, {}, {}, {r2}, {0x0, r4}, {r2}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r2, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) 18:13:03 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r4}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r11, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r17}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r16}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {r3, r5}, {}, {}, {r6, r5}, {r4}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r15, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r13}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3}, {}, {r4, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {0x0, r5}, {r3, r5}, {r4}, {}, {r3}, {r4, r5}, {r4}, {r3, r5}, {r4}, {}, {r3, r5}, {}, {}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {}, {r3}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r12}, {r4}, {r4}, {0x0, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r14}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 18:13:03 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r4}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r20) ioctl$LOOP_CTL_ADD(r19, 0x4c80, r20) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r12, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r18}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r17}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {r3, r5}, {}, {r3}, {r6, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r16, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r14}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3}, {}, {r4, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {r3}, {r4, r5}, {r4}, {0x0, r5}, {r4}, {}, {r3, r5}, {0x0, r5}, {}, {r3}, {}, {r3}, {0x0, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {0x0, r5}, {r3}, {r13}, {}, {r4}, {r11, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r15}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) 18:13:03 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {0x0, r4}, {r7, r4}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2}, {r3, r4}, {r3}, {r2, r4}, {r3}, {}, {r2, r4}, {}, {}, {r2}, {0x0, r4}, {r2}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r2, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 840.199554][ T8584] FAT-fs (loop4): bogus number of reserved sectors [ 840.206209][ T8584] FAT-fs (loop4): Can't find a valid FAT filesystem 18:13:03 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) ioctl$LOOP_CTL_ADD(r19, 0x4c80, r20) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r12, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r18}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r17}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {r3, r5}, {}, {r3}, {r6, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r16, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r14}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3}, {}, {r4, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3}, {r4, r5}, {r4}, {r3, r5}, {r4}, {}, {r3, r5}, {0x0, r5}, {}, {r3}, {0x0, r5}, {r3}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r13}, {r4}, {r4}, {r11, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4, r5}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r15}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4, r5}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 840.384995][ T8687] FAT-fs (loop0): bogus number of reserved sectors [ 840.391594][ T8687] FAT-fs (loop0): Can't find a valid FAT filesystem 18:13:03 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {0x0, r4}, {r7, r4}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2}, {r3, r4}, {r3}, {r2, r4}, {r3}, {}, {r2, r4}, {}, {}, {r2}, {0x0, r4}, {r2}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r2, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 840.473088][ T1905] udevd[1905]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 840.497673][ T1905] udevd[1905]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory 18:13:04 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r4}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) ioctl$LOOP_CTL_ADD(r19, 0x4c80, r20) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r12, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r18}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r3, r5}, {0x0, r5}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r17}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {r3, r5}, {}, {r3}, {r6, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r16, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4}, {r3, r5}, {r4, r5}, {r14}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3}, {}, {0x0, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {}, {r3, r5}, {}, {}, {r3}, {r4, r5}, {r4}, {0x0, r5}, {r4}, {}, {r3, r5}, {0x0, r5}, {}, {r3}, {}, {r3}, {0x0, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {0x0, r5}, {r3}, {r13}, {r4}, {r4}, {r11, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r15}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) 18:13:04 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {0x0, r4}, {r7, r4}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2}, {r3, r4}, {r3}, {r2, r4}, {r3}, {}, {r2, r4}, {}, {}, {r2}, {0x0, r4}, {r2}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r2, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 840.739193][ T8792] FAT-fs (loop1): bogus number of reserved sectors [ 840.745783][ T8792] FAT-fs (loop1): Can't find a valid FAT filesystem 18:13:04 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {0x0, r4}, {r7, r4}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2}, {r3, r4}, {r3}, {r2, r4}, {r3}, {}, {r2, r4}, {}, {}, {r2}, {0x0, r4}, {r2}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r2, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 840.819813][ C1] scsi_io_completion_action: 18 callbacks suppressed [ 840.819843][ C1] sd 0:0:1:0: tag#3621 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 840.836402][ C1] sd 0:0:1:0: tag#3621 CDB: opcode=0xe5 (vendor) [ 840.842860][ C1] sd 0:0:1:0: tag#3621 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 840.851899][ C1] sd 0:0:1:0: tag#3621 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 840.860964][ C1] sd 0:0:1:0: tag#3621 CDB[20]: ba 18:13:04 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r4}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r11, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r17}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r16}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {0x0, r5}, {}, {r3}, {r6, r5}, {r4}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r15, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r13}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3}, {}, {r4, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {0x0, r5}, {r3, r5}, {r4}, {}, {r3}, {r4, r5}, {r4}, {r3, r5}, {r4}, {}, {r3, r5}, {}, {}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {}, {r3}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r12}, {r4}, {r4}, {0x0, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r14}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 840.918209][ T8835] FAT-fs (loop5): bogus number of reserved sectors [ 840.924816][ T8835] FAT-fs (loop5): Can't find a valid FAT filesystem 18:13:04 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {0x0, r4}, {r7, r4}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2}, {r3, r4}, {r3}, {r2, r4}, {r3}, {}, {r2, r4}, {}, {}, {r2}, {0x0, r4}, {r2}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r2, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) 18:13:04 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r4}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r12, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r17}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r16}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {r3, r5}, {}, {r3}, {r6, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r15, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r13}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3}, {}, {r4, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {r3}, {r4, r5}, {r4}, {0x0, r5}, {r4}, {}, {r3, r5}, {0x0, r5}, {}, {r3}, {}, {r3}, {0x0, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {0x0, r5}, {r3}, {}, {r4}, {r4}, {r11, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r14}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 841.007627][T25240] udevd[25240]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 841.111396][ T8905] FAT-fs (loop4): bogus number of reserved sectors [ 841.118139][ T8905] FAT-fs (loop4): Can't find a valid FAT filesystem 18:13:04 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) ioctl$LOOP_CTL_ADD(r19, 0x4c80, r20) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r12, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r18}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r17}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {r3, r5}, {}, {r3}, {r6, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r16, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r14}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3}, {r3}, {}, {r4, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3}, {r4, r5}, {r4}, {r3, r5}, {r4}, {}, {r3, r5}, {0x0, r5}, {}, {r3}, {0x0, r5}, {r3}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r13}, {r4}, {r4}, {r11, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4, r5}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r15}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4, r5}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 841.198835][ C1] sd 0:0:1:0: tag#3622 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 841.208706][ C1] sd 0:0:1:0: tag#3622 CDB: opcode=0xe5 (vendor) [ 841.215066][ C1] sd 0:0:1:0: tag#3622 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 841.224106][ C1] sd 0:0:1:0: tag#3622 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 841.233145][ C1] sd 0:0:1:0: tag#3622 CDB[20]: ba 18:13:04 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {0x0, r4}, {r7, r4}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2}, {r3, r4}, {r3}, {r2, r4}, {r3}, {}, {r2, r4}, {}, {}, {r2}, {0x0, r4}, {r2}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r2, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 841.295695][ T9008] FAT-fs (loop0): bogus number of reserved sectors [ 841.302394][ T9008] FAT-fs (loop0): Can't find a valid FAT filesystem [ 841.384295][ C1] sd 0:0:1:0: tag#3623 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 841.394163][ C1] sd 0:0:1:0: tag#3623 CDB: opcode=0xe5 (vendor) [ 841.400493][ C1] sd 0:0:1:0: tag#3623 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 841.409549][ C1] sd 0:0:1:0: tag#3623 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 841.418828][ C1] sd 0:0:1:0: tag#3623 CDB[20]: ba [ 841.433064][ T1905] udevd[1905]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 841.461932][ T1905] udevd[1905]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory 18:13:05 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r4}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) ioctl$LOOP_CTL_ADD(r19, 0x4c80, r20) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r12, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r18}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r3, r5}, {0x0, r5}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r17}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {r3, r5}, {}, {r3}, {r6, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r16, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4}, {r3, r5}, {r4, r5}, {r14}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3}, {}, {0x0, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {}, {r3, r5}, {}, {}, {r3}, {r4, r5}, {r4}, {0x0, r5}, {r4}, {}, {r3, r5}, {0x0, r5}, {}, {r3}, {}, {r3}, {0x0, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {0x0, r5}, {r3}, {r13}, {r4}, {r4}, {r11, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r15}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) 18:13:05 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {0x0, r4}, {r7, r4}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2}, {r3, r4}, {r3}, {r2, r4}, {r3}, {}, {r2, r4}, {}, {}, {r2}, {0x0, r4}, {r2}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r2, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 841.656072][ T9114] FAT-fs (loop1): bogus number of reserved sectors [ 841.662677][ T9114] FAT-fs (loop1): Can't find a valid FAT filesystem [ 841.724501][ C0] sd 0:0:1:0: tag#3624 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 841.734372][ C0] sd 0:0:1:0: tag#3624 CDB: opcode=0xe5 (vendor) [ 841.740709][ C0] sd 0:0:1:0: tag#3624 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 841.749763][ C0] sd 0:0:1:0: tag#3624 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 841.758815][ C0] sd 0:0:1:0: tag#3624 CDB[20]: ba 18:13:05 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {0x0, r4}, {r7, r4}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2}, {r3, r4}, {r3}, {r2, r4}, {r3}, {}, {r2, r4}, {}, {}, {r2}, {0x0, r4}, {r2}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r2, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 841.886323][ T9221] FAT-fs (loop5): bogus number of reserved sectors [ 841.892934][ T9221] FAT-fs (loop5): Can't find a valid FAT filesystem 18:13:05 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r4}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r11, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r17}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r16}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {0x0, r5}, {}, {r3}, {r6, r5}, {r4}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r15, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r13}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3}, {}, {r4, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {0x0, r5}, {r3, r5}, {r4}, {}, {r3}, {r4, r5}, {r4}, {r3, r5}, {r4}, {}, {r3, r5}, {}, {}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {}, {r3}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r12}, {r4}, {r4}, {0x0, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r14}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 18:13:05 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r4}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r12, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r17}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r16}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {r3, r5}, {}, {r3}, {r6, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r15, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r13}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3}, {}, {r4, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {r3}, {r4, r5}, {r4}, {0x0, r5}, {r4}, {}, {r3, r5}, {0x0, r5}, {}, {r3}, {}, {r3}, {0x0, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {0x0, r5}, {r3}, {}, {r4}, {r4}, {r11, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r14}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) 18:13:05 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {0x0, r4}, {r7, r4}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2}, {r3, r4}, {r3}, {r2, r4}, {r3}, {}, {r2, r4}, {}, {}, {r2}, {0x0, r4}, {r2}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r2, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 842.000219][ T9223] FAT-fs (loop4): bogus number of reserved sectors [ 842.006805][ T9223] FAT-fs (loop4): Can't find a valid FAT filesystem 18:13:05 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) ioctl$LOOP_CTL_ADD(r19, 0x4c80, r20) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r12, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r18}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r17}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {r3, r5}, {}, {r3}, {r6, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r16, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r14}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3}, {r3}, {}, {r4, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3}, {r4, r5}, {r4}, {r3, r5}, {r4}, {}, {r3, r5}, {0x0, r5}, {}, {r3}, {0x0, r5}, {r3}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r13}, {r4}, {r4}, {r11, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4, r5}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r15}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4, r5}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 842.096643][ C0] sd 0:0:1:0: tag#3625 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 842.106520][ C0] sd 0:0:1:0: tag#3625 CDB: opcode=0xe5 (vendor) [ 842.112980][ C0] sd 0:0:1:0: tag#3625 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 842.122002][ C0] sd 0:0:1:0: tag#3625 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 842.131070][ C0] sd 0:0:1:0: tag#3625 CDB[20]: ba [ 842.228780][ T9332] FAT-fs (loop0): bogus number of reserved sectors [ 842.235332][ T9332] FAT-fs (loop0): Can't find a valid FAT filesystem 18:13:05 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {0x0, r4}, {r7, r4}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2}, {r3, r4}, {r3}, {r2, r4}, {r3}, {}, {r2, r4}, {}, {}, {r2}, {0x0, r4}, {r2}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r2, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 842.295373][ C1] sd 0:0:1:0: tag#3626 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 842.305253][ C1] sd 0:0:1:0: tag#3626 CDB: opcode=0xe5 (vendor) [ 842.311582][ C1] sd 0:0:1:0: tag#3626 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 842.320637][ C1] sd 0:0:1:0: tag#3626 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 842.329683][ C1] sd 0:0:1:0: tag#3626 CDB[20]: ba 18:13:05 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r4}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) ioctl$LOOP_CTL_ADD(r19, 0x4c80, r20) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r12, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r18}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r3, r5}, {r3}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r17}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {r3, r5}, {}, {r3}, {r6, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r16, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4}, {r3, r5}, {r4, r5}, {r14}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3}, {}, {0x0, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {}, {r3, r5}, {}, {}, {r3}, {r4, r5}, {r4}, {0x0, r5}, {r4}, {}, {r3, r5}, {0x0, r5}, {}, {r3}, {}, {r3}, {0x0, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {0x0, r5}, {r3}, {r13}, {r4}, {r4}, {r11, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r15}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 842.544316][ T9437] FAT-fs (loop1): bogus number of reserved sectors [ 842.550955][ T9437] FAT-fs (loop1): Can't find a valid FAT filesystem 18:13:06 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {0x0, r4}, {r7, r4}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2}, {r3, r4}, {r3}, {r2, r4}, {r3}, {}, {r2, r4}, {}, {}, {r2}, {0x0, r4}, {r2}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r2, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 842.630343][ C1] sd 0:0:1:0: tag#3627 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 842.640205][ C1] sd 0:0:1:0: tag#3627 CDB: opcode=0xe5 (vendor) [ 842.646561][ C1] sd 0:0:1:0: tag#3627 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 842.655616][ C1] sd 0:0:1:0: tag#3627 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 842.664660][ C1] sd 0:0:1:0: tag#3627 CDB[20]: ba 18:13:06 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {0x0, r4}, {r7, r4}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2}, {r3, r4}, {r3}, {r2, r4}, {r3}, {}, {r2, r4}, {}, {}, {r2}, {0x0, r4}, {r2}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r2, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) 18:13:06 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r4}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r12, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r17}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r16}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {r3, r5}, {}, {r3}, {r6, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r15, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r13}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3}, {}, {r4, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {r3}, {r4, r5}, {r4}, {0x0, r5}, {r4}, {}, {r3, r5}, {0x0, r5}, {}, {r3}, {}, {r3}, {0x0, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {0x0, r5}, {r3}, {}, {r4}, {r4}, {r11, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r14}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 842.824597][ T9501] FAT-fs (loop5): bogus number of reserved sectors [ 842.831162][ T9501] FAT-fs (loop5): Can't find a valid FAT filesystem 18:13:06 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {0x0, r4}, {r7, r4}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2}, {r3, r4}, {r3}, {r2, r4}, {r3}, {}, {r2, r4}, {}, {}, {r2}, {0x0, r4}, {r2}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r2, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 842.881141][ T9544] FAT-fs (loop4): bogus number of reserved sectors [ 842.887704][ T9544] FAT-fs (loop4): Can't find a valid FAT filesystem 18:13:06 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r4}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r11, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r17}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r16}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {0x0, r5}, {}, {r3}, {r6, r5}, {r4}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r15, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r13}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3}, {}, {r4, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {0x0, r5}, {r3, r5}, {r4}, {}, {r3}, {r4, r5}, {r4}, {r3, r5}, {r4}, {}, {r3, r5}, {}, {}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {}, {r3}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r12}, {r4}, {r4}, {0x0, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r14}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 842.969990][ C1] sd 0:0:1:0: tag#3628 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 842.979953][ C1] sd 0:0:1:0: tag#3628 CDB: opcode=0xe5 (vendor) [ 842.986320][ C1] sd 0:0:1:0: tag#3628 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 842.995475][ C1] sd 0:0:1:0: tag#3628 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 843.004521][ C1] sd 0:0:1:0: tag#3628 CDB[20]: ba 18:13:06 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) ioctl$LOOP_CTL_ADD(r19, 0x4c80, r20) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r12, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r18}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r17}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {r3, r5}, {}, {r3}, {r6, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r16, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r14}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3}, {r3}, {}, {r4, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3}, {r4, r5}, {r4}, {r3, r5}, {r4}, {}, {r3, r5}, {0x0, r5}, {}, {r3}, {0x0, r5}, {r3}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r13}, {r4}, {r4}, {r11, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4, r5}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r15}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4, r5}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) 18:13:06 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {0x0, r4}, {r7, r4}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2}, {r3, r4}, {r3}, {r2, r4}, {r3}, {}, {r2, r4}, {}, {}, {r2}, {0x0, r4}, {r2}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r2, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 843.104129][ T9649] FAT-fs (loop0): bogus number of reserved sectors [ 843.110726][ T9649] FAT-fs (loop0): Can't find a valid FAT filesystem [ 843.172434][ C1] sd 0:0:1:0: tag#3629 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 843.182322][ C1] sd 0:0:1:0: tag#3629 CDB: opcode=0xe5 (vendor) [ 843.188699][ C1] sd 0:0:1:0: tag#3629 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 843.197760][ C1] sd 0:0:1:0: tag#3629 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 843.206812][ C1] sd 0:0:1:0: tag#3629 CDB[20]: ba 18:13:06 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {0x0, r4}, {r7, r4}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2}, {r3, r4}, {r3}, {r2, r4}, {r3}, {}, {r2, r4}, {}, {}, {r2}, {0x0, r4}, {r2}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r2, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) 18:13:06 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r4}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) ioctl$LOOP_CTL_ADD(r19, 0x4c80, r20) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r12, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r18}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r3, r5}, {r3}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r17}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {r3, r5}, {}, {r3}, {r6, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r16, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4}, {r3, r5}, {r4, r5}, {r14}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3}, {}, {0x0, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {}, {r3, r5}, {}, {}, {r3}, {r4, r5}, {r4}, {0x0, r5}, {r4}, {}, {r3, r5}, {0x0, r5}, {}, {r3}, {}, {r3}, {0x0, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {0x0, r5}, {r3}, {r13}, {r4}, {r4}, {r11, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r15}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) 18:13:06 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {0x0, r4}, {r7, r4}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2}, {r3, r4}, {r3}, {r2, r4}, {r3}, {}, {r2, r4}, {}, {}, {r2}, {0x0, r4}, {r2}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r2, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 843.444019][ T9760] FAT-fs (loop1): bogus number of reserved sectors [ 843.450588][ T9760] FAT-fs (loop1): Can't find a valid FAT filesystem [ 843.507733][ C0] sd 0:0:1:0: tag#3630 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 843.517600][ C0] sd 0:0:1:0: tag#3630 CDB: opcode=0xe5 (vendor) [ 843.523963][ C0] sd 0:0:1:0: tag#3630 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 843.533013][ C0] sd 0:0:1:0: tag#3630 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 843.542059][ C0] sd 0:0:1:0: tag#3630 CDB[20]: ba 18:13:07 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {0x0, r4}, {r7, r4}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2}, {r3, r4}, {r3}, {r2, r4}, {r3}, {}, {r2, r4}, {}, {}, {r2}, {0x0, r4}, {r2}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r2, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) 18:13:07 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r4}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r20) ioctl$LOOP_CTL_ADD(r19, 0x4c80, r20) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r12, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r18}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r17}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {r3, r5}, {}, {r3}, {r6, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r16, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r14}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3}, {}, {r4, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {r3}, {r4, r5}, {r4}, {0x0, r5}, {r4}, {}, {r3, r5}, {0x0, r5}, {}, {r3}, {}, {r3}, {0x0, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {0x0, r5}, {}, {r13}, {r4}, {r4}, {r11, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r15}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) 18:13:07 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r4}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r12, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r17}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r16}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {r3, r5}, {}, {r3}, {r6, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r15, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r13}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3}, {}, {r4, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {r3}, {r4, r5}, {r4}, {0x0, r5}, {r4}, {}, {r3, r5}, {0x0, r5}, {}, {r3}, {}, {r3}, {0x0, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {0x0, r5}, {r3}, {}, {r4}, {r4}, {r11, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r14}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 843.787538][ T9967] FAT-fs (loop4): bogus number of reserved sectors [ 843.794130][ T9967] FAT-fs (loop4): Can't find a valid FAT filesystem [ 843.848360][ T9969] FAT-fs (loop5): bogus number of reserved sectors [ 843.854966][ T9969] FAT-fs (loop5): Can't find a valid FAT filesystem 18:13:07 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) ioctl$LOOP_CTL_ADD(r19, 0x4c80, r20) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r12, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r18}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r17}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {r3, r5}, {}, {r3}, {r6, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r16, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r14}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {}, {r3, r5}, {r3}, {}, {r4, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3}, {r4, r5}, {r4}, {r3, r5}, {r4}, {}, {r3, r5}, {0x0, r5}, {}, {r3}, {0x0, r5}, {r3}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r13}, {r4}, {r4}, {r11, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4, r5}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r15}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4, r5}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) 18:13:07 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {0x0, r4}, {r7, r4}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2}, {r3, r4}, {r3}, {r2, r4}, {r3}, {}, {r2, r4}, {}, {}, {r2}, {0x0, r4}, {r2}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r2, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 843.992335][T10073] FAT-fs (loop0): bogus number of reserved sectors [ 843.998920][T10073] FAT-fs (loop0): Can't find a valid FAT filesystem 18:13:07 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r4}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r11, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r17}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r16}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {r3}, {}, {r3}, {r6, r5}, {r4}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r15, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r13}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3}, {}, {r4, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {0x0, r5}, {r3, r5}, {r4}, {}, {r3}, {r4, r5}, {r4}, {r3, r5}, {r4}, {}, {r3, r5}, {}, {}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {}, {r3}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r12}, {r4}, {r4}, {0x0, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r14}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 18:13:07 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {0x0, r4}, {r7, r4}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2}, {r3, r4}, {r3}, {r2, r4}, {r3}, {}, {r2, r4}, {}, {}, {r2}, {0x0, r4}, {r2}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r2, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) 18:13:07 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r4}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) ioctl$LOOP_CTL_ADD(r19, 0x4c80, r20) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r12, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r18}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r3, r5}, {r3}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r17}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {r3, r5}, {}, {r3}, {r6, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r16, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4}, {r3, r5}, {r4, r5}, {r14}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3}, {}, {0x0, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {}, {r3, r5}, {}, {}, {r3}, {r4, r5}, {r4}, {0x0, r5}, {r4}, {}, {r3, r5}, {0x0, r5}, {}, {r3}, {}, {r3}, {0x0, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {0x0, r5}, {r3}, {r13}, {r4}, {r4}, {r11, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r15}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 844.341760][T10183] FAT-fs (loop1): bogus number of reserved sectors [ 844.348368][T10183] FAT-fs (loop1): Can't find a valid FAT filesystem 18:13:08 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {0x0, r4}, {r7, r4}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2}, {r3, r4}, {r3}, {r2, r4}, {r3}, {}, {r2, r4}, {}, {}, {r2}, {0x0, r4}, {r2}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r2, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) 18:13:08 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r4}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r20) ioctl$LOOP_CTL_ADD(r19, 0x4c80, r20) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r12, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r18}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r17}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {r3, r5}, {}, {r3}, {r6, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r16, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r14}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3}, {}, {r4, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {r3}, {r4, r5}, {r4}, {0x0, r5}, {r4}, {}, {r3, r5}, {0x0, r5}, {}, {r3}, {}, {r3}, {0x0, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {0x0, r5}, {}, {r13}, {r4}, {r4}, {r11, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r15}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) 18:13:08 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {0x0, r4}, {r7, r4}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2}, {r3, r4}, {r3}, {r2, r4}, {r3}, {}, {r2, r4}, {}, {}, {r2}, {0x0, r4}, {r2}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r2, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 844.672131][T10289] FAT-fs (loop4): bogus number of reserved sectors [ 844.678790][T10289] FAT-fs (loop4): Can't find a valid FAT filesystem 18:13:08 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r4}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r12, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r17}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r16}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {r3, r5}, {}, {r3}, {r6, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r15, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r13}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3}, {}, {r4, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {r3}, {r4, r5}, {r4}, {0x0, r5}, {r4}, {}, {r3, r5}, {0x0, r5}, {}, {r3}, {}, {r3}, {0x0, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {0x0, r5}, {r3}, {}, {r4}, {r4}, {r11, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r14}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) 18:13:08 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) ioctl$LOOP_CTL_ADD(r19, 0x4c80, r20) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r12, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r18}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r17}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {r3, r5}, {}, {r3}, {r6, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r16, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r14}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {}, {r3, r5}, {r3}, {}, {r4, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3}, {r4, r5}, {r4}, {r3, r5}, {r4}, {}, {r3, r5}, {0x0, r5}, {}, {r3}, {0x0, r5}, {r3}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r13}, {r4}, {r4}, {r11, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4, r5}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r15}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4, r5}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 844.877640][T10469] FAT-fs (loop0): bogus number of reserved sectors [ 844.884323][T10469] FAT-fs (loop0): Can't find a valid FAT filesystem [ 844.917519][T10496] FAT-fs (loop5): bogus number of reserved sectors [ 844.924102][T10496] FAT-fs (loop5): Can't find a valid FAT filesystem 18:13:08 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {0x0, r4}, {r7, r4}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2}, {r3, r4}, {r3}, {r2, r4}, {r3}, {}, {r2, r4}, {}, {}, {r2}, {0x0, r4}, {r2}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r2, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) 18:13:08 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r4}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r11, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r17}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r16}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {r3}, {}, {r3}, {r6, r5}, {r4}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r15, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r13}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3}, {}, {r4, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {0x0, r5}, {r3, r5}, {r4}, {}, {r3}, {r4, r5}, {r4}, {r3, r5}, {r4}, {}, {r3, r5}, {}, {}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {}, {r3}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r12}, {r4}, {r4}, {0x0, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r14}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 18:13:08 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r4}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) ioctl$LOOP_CTL_ADD(r19, 0x4c80, r20) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r12, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r18}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r17}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {r3, r5}, {}, {r3}, {r6, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r16, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4}, {r3, r5}, {r4, r5}, {r14}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3}, {}, {0x0, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {}, {r3, r5}, {}, {}, {r3}, {r4, r5}, {r4}, {0x0, r5}, {r4}, {}, {r3, r5}, {0x0, r5}, {}, {r3}, {}, {r3}, {0x0, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {0x0, r5}, {r3}, {r13}, {r4}, {r4}, {r11, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r15}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) 18:13:08 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {0x0, r4}, {r7, r4}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2}, {r3, r4}, {r3}, {r2, r4}, {r3}, {}, {r2, r4}, {}, {}, {r2}, {0x0, r4}, {r2}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r2, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 845.259314][T10607] FAT-fs (loop1): bogus number of reserved sectors [ 845.265886][T10607] FAT-fs (loop1): Can't find a valid FAT filesystem 18:13:08 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {0x0, r4}, {r7, r4}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2}, {r3, r4}, {r3}, {r2, r4}, {r3}, {}, {r2, r4}, {}, {}, {r2}, {0x0, r4}, {r2}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r2, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) 18:13:08 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r4}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r20) ioctl$LOOP_CTL_ADD(r19, 0x4c80, r20) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r12, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r18}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r17}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {r3, r5}, {}, {r3}, {r6, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r16, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r14}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3}, {}, {r4, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {r3}, {r4, r5}, {r4}, {0x0, r5}, {r4}, {}, {r3, r5}, {0x0, r5}, {}, {r3}, {}, {r3}, {0x0, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {0x0, r5}, {}, {r13}, {r4}, {r4}, {r11, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r15}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 845.564803][T10808] FAT-fs (loop4): bogus number of reserved sectors [ 845.571343][T10808] FAT-fs (loop4): Can't find a valid FAT filesystem 18:13:09 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {0x0, r4}, {r7, r4}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2}, {r3, r4}, {r3}, {r2, r4}, {r3}, {}, {r2, r4}, {}, {}, {r2}, {0x0, r4}, {r2}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r2, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) 18:13:09 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) ioctl$LOOP_CTL_ADD(r19, 0x4c80, r20) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r12, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r18}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r17}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {r3, r5}, {}, {r3}, {r6, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r16, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r14}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {}, {r3, r5}, {r3}, {}, {r4, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3}, {r4, r5}, {r4}, {r3, r5}, {r4}, {}, {r3, r5}, {0x0, r5}, {}, {r3}, {0x0, r5}, {r3}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r13}, {r4}, {r4}, {r11, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4, r5}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r15}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4, r5}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) 18:13:09 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r4}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r12, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r17}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r16}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {r3, r5}, {}, {r3}, {r6, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r15, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r13}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3}, {}, {r4, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {r3}, {r4, r5}, {r4}, {0x0, r5}, {r4}, {}, {r3, r5}, {0x0, r5}, {}, {r3}, {}, {r3}, {0x0, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {0x0, r5}, {r3}, {}, {r4}, {r4}, {r11, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r14}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 845.903838][T10897] FAT-fs (loop5): bogus number of reserved sectors [ 845.910507][T10897] FAT-fs (loop5): Can't find a valid FAT filesystem 18:13:09 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {0x0, r4}, {r7, r4}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2}, {r3, r4}, {r3}, {r2, r4}, {r3}, {}, {r2, r4}, {}, {}, {r2}, {0x0, r4}, {r2}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r2, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) 18:13:09 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r4}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r11, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r17}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r16}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {r3}, {}, {r3}, {r6, r5}, {r4}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r15, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r13}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3}, {}, {r4, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {0x0, r5}, {r3, r5}, {r4}, {}, {r3}, {r4, r5}, {r4}, {r3, r5}, {r4}, {}, {r3, r5}, {}, {}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {}, {r3}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r12}, {r4}, {r4}, {0x0, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r14}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 846.026284][ C0] scsi_io_completion_action: 10 callbacks suppressed [ 846.026313][ C0] sd 0:0:1:0: tag#3646 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 846.042943][ C0] sd 0:0:1:0: tag#3646 CDB: opcode=0xe5 (vendor) [ 846.049277][ C0] sd 0:0:1:0: tag#3646 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 846.058329][ C0] sd 0:0:1:0: tag#3646 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 846.067360][ C0] sd 0:0:1:0: tag#3646 CDB[20]: ba 18:13:09 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r4}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) ioctl$LOOP_CTL_ADD(r19, 0x4c80, r20) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r12, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r18}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r17}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {r3, r5}, {}, {r3}, {r6, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r16, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4}, {r3, r5}, {r4, r5}, {r14}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3}, {}, {0x0, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {}, {r3, r5}, {}, {}, {r3}, {r4, r5}, {r4}, {0x0, r5}, {r4}, {}, {r3, r5}, {0x0, r5}, {}, {r3}, {}, {r3}, {0x0, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {0x0, r5}, {r3}, {r13}, {r4}, {r4}, {r11, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r15}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 846.146239][T11027] FAT-fs (loop1): bogus number of reserved sectors [ 846.152894][T11027] FAT-fs (loop1): Can't find a valid FAT filesystem 18:13:09 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {0x0, r4}, {r7, r4}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2}, {r3, r4}, {r3}, {r2, r4}, {r3}, {}, {r2, r4}, {}, {}, {r2}, {0x0, r4}, {r2}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r2, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 846.241790][ C1] sd 0:0:1:0: tag#3647 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 846.251650][ C1] sd 0:0:1:0: tag#3647 CDB: opcode=0xe5 (vendor) [ 846.258016][ C1] sd 0:0:1:0: tag#3647 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 846.267086][ C1] sd 0:0:1:0: tag#3647 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 846.276132][ C1] sd 0:0:1:0: tag#3647 CDB[20]: ba 18:13:09 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r4}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r20) ioctl$LOOP_CTL_ADD(r19, 0x4c80, r20) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r12, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r18}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r17}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {r3, r5}, {}, {r3}, {r6, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r16, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r14}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3}, {}, {r4, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {r3}, {r4, r5}, {r4}, {0x0, r5}, {r4}, {}, {r3, r5}, {0x0, r5}, {}, {r3}, {}, {r3}, {0x0, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {}, {r3}, {r13}, {r4}, {r4}, {r11, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r15}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 846.475020][T11139] FAT-fs (loop4): bogus number of reserved sectors [ 846.481573][T11139] FAT-fs (loop4): Can't find a valid FAT filesystem 18:13:10 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {0x0, r4}, {r7, r4}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2}, {r3, r4}, {r3}, {r2, r4}, {r3}, {}, {r2, r4}, {}, {}, {r2}, {0x0, r4}, {r2}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r2, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 846.558524][ C1] sd 0:0:1:0: tag#3584 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 846.568407][ C1] sd 0:0:1:0: tag#3584 CDB: opcode=0xe5 (vendor) [ 846.574757][ C1] sd 0:0:1:0: tag#3584 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 846.583814][ C1] sd 0:0:1:0: tag#3584 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 846.592862][ C1] sd 0:0:1:0: tag#3584 CDB[20]: ba 18:13:10 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) ioctl$LOOP_CTL_ADD(r19, 0x4c80, r20) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r12, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r18}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r17}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {r3, r5}, {}, {r3}, {r6, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r16, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r14}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r3}, {}, {r4, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3}, {r4, r5}, {r4}, {r3, r5}, {r4}, {}, {r3, r5}, {0x0, r5}, {}, {r3}, {0x0, r5}, {r3}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r13}, {r4}, {r4}, {r11, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4, r5}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r15}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4, r5}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 846.697241][ C1] sd 0:0:1:0: tag#3585 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 846.707138][ C1] sd 0:0:1:0: tag#3585 CDB: opcode=0xe5 (vendor) [ 846.713487][ C1] sd 0:0:1:0: tag#3585 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 846.722564][ C1] sd 0:0:1:0: tag#3585 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 846.731601][ C1] sd 0:0:1:0: tag#3585 CDB[20]: ba 18:13:10 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r4}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) ioctl$LOOP_CTL_ADD(r19, 0x4c80, r20) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r12, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r18}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r17}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {r3, r5}, {}, {r3}, {r6, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r16, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4}, {r3, r5}, {r4, r5}, {r14}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3}, {}, {0x0, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {}, {r3, r5}, {}, {}, {r3}, {r4, r5}, {r4}, {0x0, r5}, {r4}, {}, {r3, r5}, {0x0, r5}, {}, {r3}, {}, {r3}, {0x0, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {0x0, r5}, {r3}, {r13}, {r4}, {r4}, {r11, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r15}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) 18:13:10 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {0x0, r4}, {r7, r4}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2}, {r3, r4}, {r3}, {r2, r4}, {r3}, {}, {r2, r4}, {}, {}, {r2}, {0x0, r4}, {r2}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r2, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 846.913497][T11247] FAT-fs (loop5): bogus number of reserved sectors [ 846.920030][T11247] FAT-fs (loop5): Can't find a valid FAT filesystem 18:13:10 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r4}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) ioctl$LOOP_CTL_ADD(r19, 0x4c80, r20) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r12, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r18}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r17}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {r3, r5}, {}, {r3}, {r6, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r16, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4}, {r3, r5}, {r4, r5}, {r14}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3}, {}, {0x0, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {}, {r3, r5}, {}, {}, {r3}, {r4, r5}, {r4}, {0x0, r5}, {r4}, {}, {r3, r5}, {0x0, r5}, {}, {r3}, {}, {r3}, {0x0, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {0x0, r5}, {r3}, {r13}, {r4}, {r4}, {r11, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r15}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 846.991778][ C0] sd 0:0:1:0: tag#3586 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 847.001641][ C0] sd 0:0:1:0: tag#3586 CDB: opcode=0xe5 (vendor) [ 847.008018][ C0] sd 0:0:1:0: tag#3586 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 847.017049][ C0] sd 0:0:1:0: tag#3586 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 847.026093][ C0] sd 0:0:1:0: tag#3586 CDB[20]: ba [ 847.074968][T11304] FAT-fs (loop1): bogus number of reserved sectors [ 847.081878][T11304] FAT-fs (loop1): Can't find a valid FAT filesystem 18:13:10 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r4}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r11, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r17}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r16}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {}, {r3, r5}, {}, {r3}, {r6, r5}, {r4}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r15, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r13}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3}, {}, {r4, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {0x0, r5}, {r3, r5}, {r4}, {}, {r3}, {r4, r5}, {r4}, {r3, r5}, {r4}, {}, {r3, r5}, {}, {}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {}, {r3}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r12}, {r4}, {r4}, {0x0, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r14}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 18:13:10 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {0x0, r4}, {r7, r4}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2}, {r3, r4}, {r3}, {r2, r4}, {r3}, {}, {r2, r4}, {}, {}, {r2}, {0x0, r4}, {r2}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r2, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 847.135061][ C0] sd 0:0:1:0: tag#3587 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 847.144937][ C0] sd 0:0:1:0: tag#3587 CDB: opcode=0xe5 (vendor) [ 847.151276][ C0] sd 0:0:1:0: tag#3587 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 847.160323][ C0] sd 0:0:1:0: tag#3587 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 847.169376][ C0] sd 0:0:1:0: tag#3587 CDB[20]: ba 18:13:10 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r4}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r20) ioctl$LOOP_CTL_ADD(r19, 0x4c80, r20) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r12, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r18}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r17}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {r3, r5}, {}, {r3}, {r6, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r16, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r14}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3}, {}, {r4, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {r3}, {r4, r5}, {r4}, {0x0, r5}, {r4}, {}, {r3, r5}, {0x0, r5}, {}, {r3}, {}, {r3}, {0x0, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {}, {r3}, {r13}, {r4}, {r4}, {r11, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r15}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 847.359948][T11461] FAT-fs (loop4): bogus number of reserved sectors [ 847.366565][T11461] FAT-fs (loop4): Can't find a valid FAT filesystem 18:13:10 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {0x0, r4}, {r7, r4}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2}, {r3, r4}, {r3}, {r2, r4}, {r3}, {}, {r2, r4}, {}, {}, {r2}, {0x0, r4}, {r2}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r2, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 847.435401][ C0] sd 0:0:1:0: tag#3588 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 847.445255][ C0] sd 0:0:1:0: tag#3588 CDB: opcode=0xe5 (vendor) [ 847.451590][ C0] sd 0:0:1:0: tag#3588 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 847.460657][ C0] sd 0:0:1:0: tag#3588 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 847.469833][ C0] sd 0:0:1:0: tag#3588 CDB[20]: ba 18:13:10 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) ioctl$LOOP_CTL_ADD(r19, 0x4c80, r20) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r12, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r18}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r17}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {r3, r5}, {}, {r3}, {r6, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r16, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r14}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r3}, {}, {r4, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3}, {r4, r5}, {r4}, {r3, r5}, {r4}, {}, {r3, r5}, {0x0, r5}, {}, {r3}, {0x0, r5}, {r3}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r13}, {r4}, {r4}, {r11, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4, r5}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r15}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4, r5}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 847.590916][T11466] FAT-fs (loop0): bogus number of reserved sectors [ 847.597554][T11466] FAT-fs (loop0): Can't find a valid FAT filesystem [ 847.675321][ C0] sd 0:0:1:0: tag#3589 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 847.685183][ C0] sd 0:0:1:0: tag#3589 CDB: opcode=0xe5 (vendor) [ 847.691538][ C0] sd 0:0:1:0: tag#3589 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 847.700666][ C0] sd 0:0:1:0: tag#3589 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 847.709707][ C0] sd 0:0:1:0: tag#3589 CDB[20]: ba 18:13:11 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r4}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) ioctl$LOOP_CTL_ADD(r19, 0x4c80, r20) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r12, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r18}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r17}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {r3, r5}, {}, {r3}, {r6, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r16, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4}, {r3, r5}, {r4, r5}, {r14}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3}, {}, {0x0, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {}, {r3, r5}, {}, {}, {r3}, {r4, r5}, {r4}, {0x0, r5}, {r4}, {}, {r3, r5}, {0x0, r5}, {}, {r3}, {}, {r3}, {0x0, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {0x0, r5}, {r3}, {r13}, {r4}, {r4}, {r11, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r15}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) 18:13:11 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {0x0, r4}, {r7, r4}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2}, {r3, r4}, {r3}, {r2, r4}, {r3}, {}, {r2, r4}, {}, {}, {r2}, {0x0, r4}, {r2}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r2, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) 18:13:11 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r4}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) ioctl$LOOP_CTL_ADD(r19, 0x4c80, r20) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r12, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r18}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r3}, {r3, r5}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r17}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {r3, r5}, {}, {r3}, {r6, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r16, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4}, {r3, r5}, {r4, r5}, {r14}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3}, {}, {0x0, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {}, {r3, r5}, {}, {}, {r3}, {r4, r5}, {r4}, {0x0, r5}, {r4}, {}, {r3, r5}, {0x0, r5}, {}, {r3}, {}, {r3}, {0x0, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {0x0, r5}, {r3}, {r13}, {r4}, {r4}, {r11, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r15}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 847.931085][T11571] FAT-fs (loop5): bogus number of reserved sectors [ 847.937748][T11571] FAT-fs (loop5): Can't find a valid FAT filesystem [ 847.980686][T11625] FAT-fs (loop1): bogus number of reserved sectors [ 847.987293][T11625] FAT-fs (loop1): Can't find a valid FAT filesystem 18:13:11 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {0x0, r4}, {r7, r4}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2}, {r3, r4}, {r3}, {r2, r4}, {r3}, {}, {r2, r4}, {}, {}, {r2}, {0x0, r4}, {r2}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r2, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 848.027897][ C0] sd 0:0:1:0: tag#3590 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 848.037763][ C0] sd 0:0:1:0: tag#3590 CDB: opcode=0xe5 (vendor) [ 848.044108][ C0] sd 0:0:1:0: tag#3590 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 848.053138][ C0] sd 0:0:1:0: tag#3590 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 848.062176][ C0] sd 0:0:1:0: tag#3590 CDB[20]: ba [ 848.076266][ C1] sd 0:0:1:0: tag#3591 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 848.086125][ C1] sd 0:0:1:0: tag#3591 CDB: opcode=0xe5 (vendor) [ 848.092474][ C1] sd 0:0:1:0: tag#3591 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 848.101524][ C1] sd 0:0:1:0: tag#3591 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 848.111355][ C1] sd 0:0:1:0: tag#3591 CDB[20]: ba 18:13:11 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r4}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r20) ioctl$LOOP_CTL_ADD(r19, 0x4c80, r20) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r12, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r18}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r17}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {r3, r5}, {}, {r3}, {r6, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r16, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r14}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3}, {}, {r4, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {r3}, {r4, r5}, {r4}, {0x0, r5}, {r4}, {}, {r3, r5}, {0x0, r5}, {}, {r3}, {}, {r3}, {0x0, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {}, {r3}, {r13}, {r4}, {r4}, {r11, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r15}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) 18:13:11 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r4}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r11, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r17}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r16}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {}, {r3, r5}, {}, {r3}, {r6, r5}, {r4}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r15, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r13}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3}, {}, {r4, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {0x0, r5}, {r3, r5}, {r4}, {}, {r3}, {r4, r5}, {r4}, {r3, r5}, {r4}, {}, {r3, r5}, {}, {}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {}, {r3}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r12}, {r4}, {r4}, {0x0, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r14}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 848.252165][T11782] FAT-fs (loop4): bogus number of reserved sectors [ 848.258736][T11782] FAT-fs (loop4): Can't find a valid FAT filesystem 18:13:11 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {0x0, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {0x0, r4}, {r7, r4}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2}, {r3, r4}, {r3}, {r2, r4}, {r3}, {}, {r2, r4}, {}, {}, {r2}, {0x0, r4}, {r2}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r2, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) 18:13:11 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) ioctl$LOOP_CTL_ADD(r19, 0x4c80, r20) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r12, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r18}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r17}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {r3, r5}, {}, {r3}, {r6, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r16, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r14}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r3}, {}, {r4, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3}, {r4, r5}, {r4}, {r3, r5}, {r4}, {}, {r3, r5}, {0x0, r5}, {}, {r3}, {0x0, r5}, {r3}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r13}, {r4}, {r4}, {r11, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4, r5}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r15}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4, r5}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 848.497809][T11891] FAT-fs (loop0): bogus number of reserved sectors [ 848.504492][T11891] FAT-fs (loop0): Can't find a valid FAT filesystem 18:13:12 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {0x0, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {0x0, r4}, {r7, r4}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2}, {r3, r4}, {r3}, {r2, r4}, {r3}, {}, {r2, r4}, {}, {}, {r2}, {0x0, r4}, {r2}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r2, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) 18:13:12 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {0x0, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {0x0, r4}, {r7, r4}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2}, {r3, r4}, {r3}, {r2, r4}, {r3}, {}, {r2, r4}, {}, {}, {r2}, {0x0, r4}, {r2}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r2, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) 18:13:12 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r4}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) ioctl$LOOP_CTL_ADD(r19, 0x4c80, r20) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r12, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r18}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r3}, {r3, r5}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r17}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {r3, r5}, {}, {r3}, {r6, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r16, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4}, {r3, r5}, {r4, r5}, {r14}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3}, {}, {0x0, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {}, {r3, r5}, {}, {}, {r3}, {r4, r5}, {r4}, {0x0, r5}, {r4}, {}, {r3, r5}, {0x0, r5}, {}, {r3}, {}, {r3}, {0x0, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {0x0, r5}, {r3}, {r13}, {r4}, {r4}, {r11, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r15}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) 18:13:12 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r4}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) ioctl$LOOP_CTL_ADD(r19, 0x4c80, r20) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r12, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r18}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r17}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {r3, r5}, {}, {r3}, {r6, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r16, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4}, {r3, r5}, {r4, r5}, {r14}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3}, {}, {0x0, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {}, {r3, r5}, {}, {}, {r3}, {r4, r5}, {r4}, {0x0, r5}, {r4}, {}, {r3, r5}, {0x0, r5}, {}, {r3}, {}, {r3}, {0x0, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {0x0, r5}, {r3}, {r13}, {r4}, {r4}, {r11, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r15}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 848.876736][T11998] FAT-fs (loop1): bogus number of reserved sectors [ 848.883342][T11998] FAT-fs (loop1): Can't find a valid FAT filesystem [ 848.928082][T12000] FAT-fs (loop5): bogus number of reserved sectors [ 848.934642][T12000] FAT-fs (loop5): Can't find a valid FAT filesystem 18:13:12 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {0x0, r4}, {r7, r4}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2}, {r3, r4}, {r3}, {r2, r4}, {r3}, {}, {r2, r4}, {}, {}, {r2}, {0x0, r4}, {r2}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r2, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) 18:13:12 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r4}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r20) ioctl$LOOP_CTL_ADD(r19, 0x4c80, r20) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r12, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r18}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r17}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {r3, r5}, {}, {r3}, {r6, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r16, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r14}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3}, {}, {r4, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {r3}, {r4, r5}, {r4}, {0x0, r5}, {r4}, {}, {r3, r5}, {0x0, r5}, {}, {r3}, {}, {r3}, {0x0, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {0x0, r5}, {r3}, {r13}, {r4}, {r4}, {r11, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r15}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 849.154664][T12106] FAT-fs (loop4): bogus number of reserved sectors [ 849.161199][T12106] FAT-fs (loop4): Can't find a valid FAT filesystem 18:13:12 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r4}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r11, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r17}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r16}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {}, {r3, r5}, {}, {r3}, {r6, r5}, {r4}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r15, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r13}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3}, {}, {r4, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {0x0, r5}, {r3, r5}, {r4}, {}, {r3}, {r4, r5}, {r4}, {r3, r5}, {r4}, {}, {r3, r5}, {}, {}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {}, {r3}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r12}, {r4}, {r4}, {0x0, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r14}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 18:13:12 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) ioctl$LOOP_CTL_ADD(r19, 0x4c80, r20) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r12, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r18}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r17}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {r3, r5}, {}, {r3}, {r6, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r16, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r14}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3}, {0x0, r5}, {r3, r5}, {r3}, {}, {r4, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3}, {r4, r5}, {r4}, {r3, r5}, {r4}, {}, {r3, r5}, {0x0, r5}, {}, {r3}, {0x0, r5}, {r3}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r13}, {r4}, {r4}, {r11, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4, r5}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r15}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4, r5}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) 18:13:12 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {0x0, r4}, {r7, r4}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2}, {r3, r4}, {r3}, {r2, r4}, {r3}, {}, {r2, r4}, {}, {}, {r2}, {0x0, r4}, {r2}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r2, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) 18:13:13 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {0x0, r4}, {r7, r4}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2}, {r3, r4}, {r3}, {r2, r4}, {r3}, {}, {r2, r4}, {}, {}, {r2}, {0x0, r4}, {r2}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r2, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) 18:13:13 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r4}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) ioctl$LOOP_CTL_ADD(r19, 0x4c80, r20) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r12, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r18}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r3}, {r3, r5}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r17}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {r3, r5}, {}, {r3}, {r6, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r16, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4}, {r3, r5}, {r4, r5}, {r14}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3}, {}, {0x0, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {}, {r3, r5}, {}, {}, {r3}, {r4, r5}, {r4}, {0x0, r5}, {r4}, {}, {r3, r5}, {0x0, r5}, {}, {r3}, {}, {r3}, {0x0, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {0x0, r5}, {r3}, {r13}, {r4}, {r4}, {r11, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r15}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) 18:13:13 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {0x0, r4}, {r7, r4}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2}, {r3, r4}, {r3}, {r2, r4}, {r3}, {}, {r2, r4}, {}, {}, {r2}, {0x0, r4}, {r2}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r2, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 849.774884][T12322] FAT-fs (loop1): bogus number of reserved sectors [ 849.781429][T12322] FAT-fs (loop1): Can't find a valid FAT filesystem 18:13:13 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2, r4}, {}, {r2}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {0x0, r4}, {r7, r4}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2}, {r3, r4}, {r3}, {r2, r4}, {r3}, {}, {r2, r4}, {}, {}, {r2}, {0x0, r4}, {r2}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r2, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 849.946078][T12426] FAT-fs (loop5): bogus number of reserved sectors [ 849.952756][T12426] FAT-fs (loop5): Can't find a valid FAT filesystem 18:13:13 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r4}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r20) ioctl$LOOP_CTL_ADD(r19, 0x4c80, r20) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r12, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r18}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r17}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {r3, r5}, {}, {r3}, {r6, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r16, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r14}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3}, {}, {r4, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {r3}, {r4, r5}, {r4}, {0x0, r5}, {r4}, {}, {r3, r5}, {0x0, r5}, {}, {r3}, {}, {r3}, {0x0, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {0x0, r5}, {r3}, {r13}, {r4}, {r4}, {r11, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r15}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) 18:13:13 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {0x0, r4}, {r7, r4}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2}, {r3, r4}, {r3}, {r2, r4}, {r3}, {}, {r2, r4}, {}, {}, {r2}, {0x0, r4}, {r2}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r2, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 850.062647][T12528] FAT-fs (loop4): bogus number of reserved sectors [ 850.069226][T12528] FAT-fs (loop4): Can't find a valid FAT filesystem 18:13:13 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r4}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r11, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r17}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r16}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {0x0, r5}, {0x0, r5}, {r3, r5}, {}, {r3}, {r6, r5}, {r4}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r15, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r13}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3}, {}, {r4, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {0x0, r5}, {r3, r5}, {r4}, {}, {r3}, {r4, r5}, {r4}, {r3, r5}, {r4}, {}, {r3, r5}, {}, {}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {}, {r3}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r12}, {r4}, {r4}, {0x0, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r14}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 18:13:13 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) ioctl$LOOP_CTL_ADD(r19, 0x4c80, r20) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r12, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r18}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r17}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {r3, r5}, {}, {r3}, {r6, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r16, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r14}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3}, {0x0, r5}, {r3, r5}, {r3}, {}, {r4, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3}, {r4, r5}, {r4}, {r3, r5}, {r4}, {}, {r3, r5}, {0x0, r5}, {}, {r3}, {0x0, r5}, {r3}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r13}, {r4}, {r4}, {r11, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4, r5}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r15}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4, r5}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) 18:13:13 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {0x0, r4}, {r7, r4}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2}, {r3, r4}, {r3}, {r2, r4}, {r3}, {}, {r2, r4}, {}, {}, {r2}, {0x0, r4}, {r2}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r2, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) 18:13:14 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r4}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) ioctl$LOOP_CTL_ADD(r19, 0x4c80, r20) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r12, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r18}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r17}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {r3, r5}, {}, {r3}, {r6, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r16, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4}, {r3, r5}, {r4, r5}, {r14}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3}, {}, {0x0, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {}, {r3, r5}, {}, {}, {r3}, {r4, r5}, {r4}, {0x0, r5}, {r4}, {}, {r3, r5}, {0x0, r5}, {}, {r3}, {}, {r3}, {0x0, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {0x0, r5}, {r3}, {r13}, {r4}, {r4}, {r11, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r15}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) 18:13:14 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {0x0, r4}, {r7, r4}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2}, {r3, r4}, {r3}, {r2, r4}, {r3}, {}, {r2, r4}, {}, {}, {r2}, {0x0, r4}, {r2}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r2, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 850.691824][T12741] FAT-fs (loop1): bogus number of reserved sectors [ 850.698480][T12741] FAT-fs (loop1): Can't find a valid FAT filesystem 18:13:14 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {0x0, r4}, {r7, r4}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2}, {r3, r4}, {r3}, {r2, r4}, {r3}, {}, {r2, r4}, {}, {}, {r2}, {0x0, r4}, {r2}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r2, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) 18:13:14 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r4}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r20) ioctl$LOOP_CTL_ADD(r19, 0x4c80, r20) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r12, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r18}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r17}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {r3, r5}, {}, {r3}, {r6, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r16, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r14}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3}, {}, {r4, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {r3}, {r4, r5}, {r4}, {0x0, r5}, {r4}, {}, {r3, r5}, {0x0, r5}, {}, {r3}, {}, {r3}, {0x0, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {0x0, r5}, {r3}, {r13}, {r4}, {r4}, {r11, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r15}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) 18:13:14 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {0x0, r4}, {r7, r4}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2}, {r3, r4}, {r3}, {r2, r4}, {r3}, {}, {r2, r4}, {}, {}, {r2}, {0x0, r4}, {r2}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r2, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 850.963575][T12848] FAT-fs (loop4): bogus number of reserved sectors [ 850.970134][T12848] FAT-fs (loop4): Can't find a valid FAT filesystem [ 850.977220][T12847] FAT-fs (loop5): bogus number of reserved sectors [ 850.983778][T12847] FAT-fs (loop5): Can't find a valid FAT filesystem [ 851.044935][T12847] ================================================================== [ 851.046064][ C0] scsi_io_completion_action: 10 callbacks suppressed [ 851.046091][ C0] sd 0:0:1:0: tag#3606 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 851.053021][T12847] BUG: KCSAN: data-race in __lru_add_drain_all / __pagevec_lru_add [ 851.059707][ C0] sd 0:0:1:0: tag#3606 CDB: opcode=0xe5 (vendor) [ 851.069478][T12847] [ 851.069484][T12847] write to 0xffff888237c277c8 of 1 bytes by task 12848 on cpu 0: [ 851.069501][T12847] __pagevec_lru_add+0x243/0x270 [ 851.077380][ C0] sd 0:0:1:0: tag#3606 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 851.083683][T12847] lru_add_drain_cpu+0x6a/0x260 [ 851.086013][ C0] sd 0:0:1:0: tag#3606 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 851.093690][T12847] __pagevec_release+0x4b/0xc0 [ 851.098632][ C0] sd 0:0:1:0: tag#3606 CDB[20]: ba [ 851.107602][T12847] __invalidate_mapping_pages+0x21f/0x2b0 [ 851.136969][T12847] invalidate_mapping_pages+0x23/0x30 [ 851.142511][T12847] invalidate_bdev+0x67/0x80 [ 851.147095][T12847] invalidate_disk+0x25/0xb0 [ 851.151682][T12847] __loop_clr_fd+0x41f/0x6c0 [ 851.156267][T12847] lo_ioctl+0x985/0x1270 [ 851.160590][T12847] blkdev_ioctl+0x20e/0x440 [ 851.165091][T12847] __se_sys_ioctl+0xcb/0x140 [ 851.169681][T12847] __x64_sys_ioctl+0x3f/0x50 [ 851.174273][T12847] do_syscall_64+0x44/0xd0 [ 851.178689][T12847] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 851.184590][T12847] [ 851.186908][T12847] read to 0xffff888237c277c8 of 1 bytes by task 12847 on cpu 1: [ 851.194531][T12847] __lru_add_drain_all+0x12c/0x3e0 [ 851.199644][T12847] lru_add_drain_all+0xc/0x10 [ 851.204333][T12847] invalidate_bdev+0x56/0x80 [ 851.209006][T12847] invalidate_disk+0x25/0xb0 [ 851.213594][T12847] __loop_clr_fd+0x41f/0x6c0 [ 851.218183][T12847] lo_ioctl+0x985/0x1270 [ 851.222418][T12847] blkdev_ioctl+0x20e/0x440 [ 851.226921][T12847] __se_sys_ioctl+0xcb/0x140 [ 851.231513][T12847] __x64_sys_ioctl+0x3f/0x50 [ 851.236190][T12847] do_syscall_64+0x44/0xd0 [ 851.240611][T12847] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 851.246504][T12847] [ 851.248817][T12847] value changed: 0x03 -> 0x00 [ 851.253479][T12847] [ 851.255803][T12847] Reported by Kernel Concurrency Sanitizer on: [ 851.262130][T12847] CPU: 1 PID: 12847 Comm: syz-executor.5 Not tainted 5.16.0-rc4-syzkaller #0 [ 851.270888][T12847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 851.280937][T12847] ================================================================== 18:13:14 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) ioctl$LOOP_CTL_ADD(r19, 0x4c80, r20) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r12, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r18}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r17}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {r3, r5}, {}, {r3}, {r6, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r16, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r14}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3}, {0x0, r5}, {r3, r5}, {r3}, {}, {r4, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3}, {r4, r5}, {r4}, {r3, r5}, {r4}, {}, {r3, r5}, {0x0, r5}, {}, {r3}, {0x0, r5}, {r3}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r13}, {r4}, {r4}, {r11, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4, r5}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r15}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4, r5}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) 18:13:14 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r4}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r11, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r17}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r16}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {0x0, r5}, {0x0, r5}, {r3, r5}, {}, {r3}, {r6, r5}, {r4}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r15, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r13}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3}, {}, {r4, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {0x0, r5}, {r3, r5}, {r4}, {}, {r3}, {r4, r5}, {r4}, {r3, r5}, {r4}, {}, {r3, r5}, {}, {}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {}, {r3}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r12}, {r4}, {r4}, {0x0, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r14}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 851.353032][ C0] sd 0:0:1:0: tag#3607 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 851.362890][ C0] sd 0:0:1:0: tag#3607 CDB: opcode=0xe5 (vendor) [ 851.369220][ C0] sd 0:0:1:0: tag#3607 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 851.378265][ C0] sd 0:0:1:0: tag#3607 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 851.387299][ C0] sd 0:0:1:0: tag#3607 CDB[20]: ba 18:13:14 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {r2}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {0x0, r4}, {r7, r4}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2}, {r3, r4}, {r3}, {r2, r4}, {r3}, {}, {r2, r4}, {}, {}, {r2}, {0x0, r4}, {r2}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r2, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) 18:13:14 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r4}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) ioctl$LOOP_CTL_ADD(r19, 0x4c80, r20) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r12, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r18}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r17}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {r3, r5}, {}, {r3}, {r6, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r16, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4}, {r3, r5}, {r4, r5}, {r14}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3}, {}, {0x0, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {}, {r3, r5}, {}, {}, {r3}, {r4, r5}, {r4}, {0x0, r5}, {r4}, {}, {r3, r5}, {0x0, r5}, {}, {r3}, {}, {r3}, {0x0, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {0x0, r5}, {r3}, {r13}, {r4}, {r4}, {r11, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r15}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 851.587878][T13023] FAT-fs (loop1): bogus number of reserved sectors [ 851.594545][T13023] FAT-fs (loop1): Can't find a valid FAT filesystem 18:13:15 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {0x0, r4}, {r7, r4}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2}, {r3, r4}, {r3}, {r2, r4}, {r3}, {}, {r2, r4}, {}, {}, {r2}, {0x0, r4}, {r2}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r2, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 851.657357][ C0] sd 0:0:1:0: tag#3608 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 851.667213][ C0] sd 0:0:1:0: tag#3608 CDB: opcode=0xe5 (vendor) [ 851.673572][ C0] sd 0:0:1:0: tag#3608 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 851.682702][ C0] sd 0:0:1:0: tag#3608 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 851.691718][ C0] sd 0:0:1:0: tag#3608 CDB[20]: ba 18:13:15 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r4}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r20) ioctl$LOOP_CTL_ADD(r19, 0x4c80, r20) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r12, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r18}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r17}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {r3, r5}, {}, {r3}, {r6, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r16, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r14}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3}, {}, {r4, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {r3}, {r4, r5}, {r4}, {0x0, r5}, {r4}, {}, {r3, r5}, {0x0, r5}, {}, {r3}, {}, {r3}, {0x0, r5}, {}, {}, {r3, r5}, {}, {0x0, r5}, {}, {r3}, {0x0, r5}, {r3}, {r13}, {r4}, {r4}, {r11, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r15}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) 18:13:15 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {r3}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {0x0, r4}, {r7, r4}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2}, {r3, r4}, {r3}, {r2, r4}, {r3}, {}, {r2, r4}, {}, {}, {r2}, {0x0, r4}, {r2}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r2, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 851.890867][T13169] FAT-fs (loop4): bogus number of reserved sectors [ 851.897602][T13169] FAT-fs (loop4): Can't find a valid FAT filesystem 18:13:15 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {0x0, r4}, {r7, r4}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2}, {r3, r4}, {r3}, {r2, r4}, {r3}, {}, {r2, r4}, {}, {}, {r2}, {0x0, r4}, {r2}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r2, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 851.965034][ C1] sd 0:0:1:0: tag#3609 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 851.974933][ C1] sd 0:0:1:0: tag#3609 CDB: opcode=0xe5 (vendor) [ 851.981284][ C1] sd 0:0:1:0: tag#3609 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 851.990417][ C1] sd 0:0:1:0: tag#3609 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 851.999459][ C1] sd 0:0:1:0: tag#3609 CDB[20]: ba [ 852.064271][T13173] FAT-fs (loop5): bogus number of reserved sectors [ 852.070797][T13173] FAT-fs (loop5): Can't find a valid FAT filesystem 18:13:15 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {r2}, {}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {0x0, r4}, {r7, r4}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2}, {r3, r4}, {r3}, {r2, r4}, {r3}, {}, {r2, r4}, {}, {}, {r2}, {0x0, r4}, {r2}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r2, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) 18:13:15 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) ioctl$LOOP_CTL_ADD(r19, 0x4c80, r20) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r12, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r18}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r17}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {r3, r5}, {}, {r3}, {r6, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r16, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r14}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3}, {}, {r4, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3}, {r4, r5}, {r4}, {r3, r5}, {r4}, {}, {r3, r5}, {0x0, r5}, {}, {r3}, {0x0, r5}, {r3}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r13}, {r4}, {r4}, {r11, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4, r5}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r15}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4, r5}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 852.248093][ C1] sd 0:0:1:0: tag#3610 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 852.257955][ C1] sd 0:0:1:0: tag#3610 CDB: opcode=0xe5 (vendor) [ 852.264316][ C1] sd 0:0:1:0: tag#3610 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 852.273359][ C1] sd 0:0:1:0: tag#3610 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 852.282381][ C1] sd 0:0:1:0: tag#3610 CDB[20]: ba 18:13:15 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r4}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r11, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r17}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r16}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {0x0, r5}, {0x0, r5}, {r3, r5}, {}, {r3}, {r6, r5}, {r4}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r15, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r13}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3}, {}, {r4, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {0x0, r5}, {r3, r5}, {r4}, {}, {r3}, {r4, r5}, {r4}, {r3, r5}, {r4}, {}, {r3, r5}, {}, {}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {}, {r3}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r12}, {r4}, {r4}, {0x0, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r14}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 18:13:15 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r4}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) ioctl$LOOP_CTL_ADD(r19, 0x4c80, r20) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r12, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r18}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r17}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {r3, r5}, {}, {r3}, {r6, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r16, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4}, {r3, r5}, {r4, r5}, {r14}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3}, {}, {0x0, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {}, {r3, r5}, {}, {}, {r3}, {r4, r5}, {r4}, {0x0, r5}, {r4}, {}, {r3, r5}, {0x0, r5}, {}, {r3}, {}, {r3}, {0x0, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {0x0, r5}, {r3}, {r13}, {r4}, {r4}, {r11, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r15}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) 18:13:15 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {0x0, r4}, {r7, r4}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2}, {r3, r4}, {r3}, {r2, r4}, {r3}, {}, {r2, r4}, {}, {}, {r2}, {0x0, r4}, {r2}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r2, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 852.540312][T13386] FAT-fs (loop1): bogus number of reserved sectors [ 852.546893][T13386] FAT-fs (loop1): Can't find a valid FAT filesystem [ 852.637257][ C1] sd 0:0:1:0: tag#3611 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 852.647129][ C1] sd 0:0:1:0: tag#3611 CDB: opcode=0xe5 (vendor) [ 852.653508][ C1] sd 0:0:1:0: tag#3611 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 852.662560][ C1] sd 0:0:1:0: tag#3611 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 852.671594][ C1] sd 0:0:1:0: tag#3611 CDB[20]: ba 18:13:16 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r4}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r20) ioctl$LOOP_CTL_ADD(r19, 0x4c80, r20) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r12, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r18}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r17}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {r3, r5}, {}, {r3}, {r6, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r16, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r14}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3}, {}, {r4, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {r3}, {r4, r5}, {r4}, {0x0, r5}, {r4}, {}, {r3, r5}, {0x0, r5}, {}, {r3}, {}, {r3}, {0x0, r5}, {}, {}, {r3, r5}, {}, {0x0, r5}, {}, {r3}, {0x0, r5}, {r3}, {r13}, {r4}, {r4}, {r11, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r15}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) 18:13:16 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {0x0, r4}, {r7, r4}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2}, {r3, r4}, {r3}, {r2, r4}, {r3}, {}, {r2, r4}, {}, {}, {r2}, {0x0, r4}, {r2}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r2, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 852.796440][T13490] FAT-fs (loop4): bogus number of reserved sectors [ 852.803308][T13490] FAT-fs (loop4): Can't find a valid FAT filesystem [ 852.878547][ C0] sd 0:0:1:0: tag#3612 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 852.888514][ C0] sd 0:0:1:0: tag#3612 CDB: opcode=0xe5 (vendor) [ 852.894864][ C0] sd 0:0:1:0: tag#3612 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 852.903908][ C0] sd 0:0:1:0: tag#3612 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 852.912947][ C0] sd 0:0:1:0: tag#3612 CDB[20]: ba 18:13:16 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r4}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r20) ioctl$LOOP_CTL_ADD(r19, 0x4c80, r20) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r12, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r18}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r17}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {r3, r5}, {}, {r3}, {r6, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r16, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r14}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3}, {}, {r4, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {r3}, {r4, r5}, {r4}, {0x0, r5}, {r4}, {}, {r3, r5}, {0x0, r5}, {}, {r3}, {}, {r3}, {0x0, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {0x0, r5}, {r3}, {r13}, {r4}, {r4}, {r11, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r15}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 853.035446][T13595] FAT-fs (loop5): bogus number of reserved sectors [ 853.042179][T13595] FAT-fs (loop5): Can't find a valid FAT filesystem 18:13:16 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) ioctl$LOOP_CTL_ADD(r19, 0x4c80, r20) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r12, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r18}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r17}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {r3, r5}, {}, {r3}, {r6, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r16, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r14}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3}, {}, {r4, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3}, {r4, r5}, {r4}, {r3, r5}, {r4}, {}, {r3, r5}, {0x0, r5}, {}, {r3}, {0x0, r5}, {r3}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r13}, {r4}, {r4}, {r11, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4, r5}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r15}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4, r5}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) 18:13:16 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {0x0, r4}, {r7, r4}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2}, {r3, r4}, {r3}, {r2, r4}, {r3}, {}, {r2, r4}, {}, {}, {r2}, {0x0, r4}, {r2}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r2, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 853.131991][ C1] sd 0:0:1:0: tag#3613 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 853.141851][ C1] sd 0:0:1:0: tag#3613 CDB: opcode=0xe5 (vendor) [ 853.148237][ C1] sd 0:0:1:0: tag#3613 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 853.157283][ C1] sd 0:0:1:0: tag#3613 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 853.166421][ C1] sd 0:0:1:0: tag#3613 CDB[20]: ba [ 853.203326][ C0] sd 0:0:1:0: tag#3614 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 853.213449][ C0] sd 0:0:1:0: tag#3614 CDB: opcode=0xe5 (vendor) [ 853.219778][ C0] sd 0:0:1:0: tag#3614 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 853.228838][ C0] sd 0:0:1:0: tag#3614 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 853.238127][ C0] sd 0:0:1:0: tag#3614 CDB[20]: ba 18:13:16 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r4}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r19, 0x4c81, r20) ioctl$LOOP_CTL_ADD(r19, 0x4c80, r20) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r12, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r18}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {}, {r3, r5}, {r3, r5}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r17}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {r3, r5}, {}, {r3}, {r6, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r16, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4}, {r3, r5}, {r4, r5}, {r14}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3}, {}, {0x0, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {}, {r3, r5}, {}, {}, {r3}, {r4, r5}, {r4}, {0x0, r5}, {r4}, {}, {r3, r5}, {0x0, r5}, {}, {r3}, {}, {r3}, {0x0, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {0x0, r5}, {r3}, {r13}, {r4}, {r4}, {r11, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r15}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) 18:13:16 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {0x0, r4}, {r7, r4}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2}, {r3, r4}, {r3}, {r2, r4}, {r3}, {}, {r2, r4}, {}, {}, {r2}, {0x0, r4}, {r2}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r2, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) 18:13:16 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r4}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r11, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r17}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r16}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r3, r5}, {}, {r3}, {r6, r5}, {r4}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r15, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r13}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3}, {}, {r4, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {0x0, r5}, {r3, r5}, {r4}, {}, {r3}, {r4, r5}, {r4}, {r3, r5}, {r4}, {}, {r3, r5}, {}, {}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {}, {r3}, {r3, r5}, {}, {r3, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r12}, {r4}, {r4}, {0x0, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r14}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 853.456558][T13705] FAT-fs (loop1): bogus number of reserved sectors [ 853.463137][T13705] FAT-fs (loop1): Can't find a valid FAT filesystem 18:13:17 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {0x0, r4}, {r7, r4}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2}, {r3, r4}, {r3}, {r2, r4}, {r3}, {}, {r2, r4}, {}, {}, {r2}, {0x0, r4}, {r2}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r2, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 853.534394][ C0] sd 0:0:1:0: tag#3615 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 853.544431][ C0] sd 0:0:1:0: tag#3615 CDB: opcode=0xe5 (vendor) [ 853.550774][ C0] sd 0:0:1:0: tag#3615 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 853.559834][ C0] sd 0:0:1:0: tag#3615 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 853.569056][ C0] sd 0:0:1:0: tag#3615 CDB[20]: ba 18:13:17 executing program 4: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r4}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r19 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r20 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r20) ioctl$LOOP_CTL_ADD(r19, 0x4c80, r20) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r3}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r4}, {}, {r3, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {}, {r4, r5}, {0x0, r5}, {r4, r5}, {r7}, {r9}, {r3}, {r4, r5}, {r4, r5}, {r12, r5}, {r3, r5}, {}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {r3, r5}, {r18}, {r3}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r4}, {r4}, {r4, r5}, {}, {r3, r5}, {0x0, r10}, {0x0, r17}, {0x0, r5}, {r4, r5}, {}, {}, {}, {r3, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {r3, r5}, {}, {r3}, {r6, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {r16, r5}, {r4, r5}, {r4}, {r3}, {r4, r5}, {0x0, r5}, {r8, r5}, {r3}, {r3, r5}, {r4, r5}, {r3}, {r3}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r14}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3}, {}, {r4, r5}, {0x0, r5}, {r3}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {r4}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {r3}, {r3, r5}, {}, {r4}, {r4, r5}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}, {r3, r5}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {r3}, {r4, r5}, {r4}, {0x0, r5}, {r4}, {}, {r3, r5}, {0x0, r5}, {}, {r3}, {}, {r3}, {0x0, r5}, {}, {}, {r3, r5}, {}, {0x0, r5}, {}, {r3}, {0x0, r5}, {r3}, {r13}, {r4}, {r4}, {r11, r5}, {r3}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r15}, {r4}, {r4, r5}, {}, {}, {r3, r5}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) [ 853.677807][T13840] FAT-fs (loop4): bogus number of reserved sectors [ 853.684442][T13840] FAT-fs (loop4): Can't find a valid FAT filesystem 18:13:17 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r3}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "2b1d4b947586fc"}) r18 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r19 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r18, 0x4c81, r19) ioctl$LOOP_CTL_ADD(r18, 0x4c80, r19) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r19) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000440)={0x9, [{r3}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {r3, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {r2, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {}, {}, {r3}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r6}, {r8}, {r2}, {r3, r4}, {r3, r4}, {r11, r4}, {r2, r4}, {}, {r2}, {r3, r4}, {r3, r4}, {r2, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r3}, {r3, r4}, {r2, r4}, {r17}, {r2}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r3}, {}, {r3, r4}, {}, {r2, r4}, {0x0, r9}, {0x0, r16}, {0x0, r4}, {r3, r4}, {}, {}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {r2}, {r5, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r15, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {0x0, r4}, {r7, r4}, {r2}, {r2, r4}, {r3, r4}, {r2}, {r2}, {r2, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {r13}, {r3, r4}, {r2, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {r2}, {r3, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3, r4}, {0x0, r4}, {r2}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3, r4}, {r3}, {r3, r4}, {r2, r4}, {r2, r4}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r3}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {r2}, {r3, r4}, {r3}, {r2, r4}, {r3}, {}, {r2, r4}, {}, {}, {r2}, {0x0, r4}, {r2}, {r2, r4}, {}, {r2}, {r2, r4}, {}, {r2, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r12}, {r3}, {r3}, {r10, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r2, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r14}, {r3}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2, r4}, {r2, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r3, r4}], 0x9, "4c4b9663723639"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0xa8802, 0xcc) 18:13:17 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x71f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050100)={0x0, ""/256, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0