Warning: Permanently added '[localhost]:1729' (ECDSA) to the list of known hosts.
2026/01/16 07:11:03 fuzzer started
2026/01/16 07:11:03 dialing manager at localhost:35245
syzkaller login: [   53.112637] cgroup: Unknown subsys name 'net'
[   53.177187] cgroup: Unknown subsys name 'cpuset'
[   53.194021] cgroup: Unknown subsys name 'rlimit'
2026/01/16 07:11:15 syscalls: 201
2026/01/16 07:11:15 code coverage: enabled
2026/01/16 07:11:15 comparison tracing: enabled
2026/01/16 07:11:15 extra coverage: enabled
2026/01/16 07:11:15 setuid sandbox: enabled
2026/01/16 07:11:15 namespace sandbox: enabled
2026/01/16 07:11:15 Android sandbox: enabled
2026/01/16 07:11:15 fault injection: enabled
2026/01/16 07:11:15 leak checking: enabled
2026/01/16 07:11:15 net packet injection: enabled
2026/01/16 07:11:15 net device setup: enabled
2026/01/16 07:11:15 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2026/01/16 07:11:15 devlink PCI setup: PCI device 0000:00:10.0 is not available
2026/01/16 07:11:15 USB emulation: enabled
2026/01/16 07:11:15 hci packet injection: enabled
2026/01/16 07:11:15 wifi device emulation: enabled
2026/01/16 07:11:15 802.15.4 emulation: enabled
2026/01/16 07:11:15 fetching corpus: 0, signal 0/0 (executing program)
2026/01/16 07:11:16 starting 8 fuzzer processes
07:11:16 executing program 1:
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x9)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000))
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
write$P9_RLOPEN(r1, &(0x7f0000000080)={0x18, 0xd, 0x2, {{0x10, 0x0, 0x1}, 0xf08}}, 0x18)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff, {0x9}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {0x8}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r4=>r0, {0x6}}, './file0\x00'})
r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x12400, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r6=>r4, {<r7=>0xffffffffffffffff}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r8=>r7, {0x200000}}, './file0/file0\x00'})
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000240)={{0x0, 0x7, 0x85c, 0x8, 0x0, 0x81, 0xfe, 0xd4b4, 0x7, 0x8, 0xff, 0x8001, 0x0, 0x3, 0x100000001}})
r9 = fsmount(r2, 0x1, 0x4)
ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000001240)={0x7, 0x4d, 0x1}, 0x7)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000001280)={{0x1, 0x1, 0x18, r3, {0x10}}, './file0\x00'})
r10 = syz_open_dev$rtc(&(0x7f00000012c0), 0x60ff, 0x575100)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r8, 0xc018937a, &(0x7f0000001300)={{0x1, 0x1, 0x18, r10, {0x2}}, './file1\x00'})
r11 = syz_open_dev$evdev(&(0x7f0000001340), 0x4, 0x400)
ioctl$EVIOCREVOKE(r11, 0x40044591, &(0x7f0000001380)=0x8)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000001400)={{0x1, 0x1, 0x18, r0, {r1}}, './file0/file0\x00'})

07:11:16 executing program 5:
write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x33, 0x2}, 0x7)
write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000080)={0x57, 0x6f, 0x1, {0x6, [{0x0, 0x1, 0x6}, {0x2, 0x0, 0x3}, {0x0, 0x0, 0x6}, {0x80, 0x0, 0x1}, {0x0, 0x0, 0x7}, {0x60, 0x4, 0x2}]}}, 0x57)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
write$P9_RXATTRWALK(r0, &(0x7f0000000140)={0xf, 0x1f, 0x2, 0x4}, 0xf)
write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8)
write$P9_RLOPEN(r0, &(0x7f00000001c0)={0x18, 0xd, 0x2, {{0x8, 0x0, 0x2}}}, 0x18)
ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000200)=""/53)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0)
r2 = getuid()
getresgid(&(0x7f0000000280), &(0x7f00000002c0)=<r3=>0x0, &(0x7f0000000300)=<r4=>0x0)
write$P9_RSTATu(r1, &(0x7f0000000340)={0x64, 0x7d, 0x1, {{0x0, 0x4e, 0x0, 0x8, {0x1, 0x4, 0x5}, 0x10080000, 0x8e, 0x40, 0x7, 0x3, ',]{', 0xd, ')$-:\\-+/-@--%', 0x3, '%\xa5 ', 0x8, '\\!%^{-^\\'}, 0x1, '{', r2, r3}}, 0x64)
write$P9_RFSYNC(r1, &(0x7f00000003c0)={0x7, 0x33, 0x4b7a}, 0x7)
keyctl$session_to_parent(0x12)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'})
write$P9_RMKNOD(r1, &(0x7f0000000440)={0x14, 0x13, 0x1, {0x20, 0x0, 0x1}}, 0x14)
r5 = syz_open_dev$evdev(&(0x7f0000000480), 0x800, 0x200)
ioctl$EVIOCGSW(r5, 0x8040451b, &(0x7f00000004c0)=""/169)
setregid(r4, 0xee01)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000580)={{0x1, 0x1, 0x18}, './file0\x00'})

07:11:16 executing program 2:
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)={0x13, 0x65, 0xffff, 0xa, 0x6, '9P2000'}, 0x13)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
write$P9_RLOPEN(r0, &(0x7f0000000080)={0x18, 0xd, 0x1, {{0x0, 0x2, 0x2}, 0x1}}, 0x18)
write$P9_RFLUSH(r0, &(0x7f00000000c0)={0x7, 0x6d, 0x1}, 0x7)
write$P9_RFLUSH(r0, &(0x7f0000000100)={0x7, 0x6d, 0x2}, 0x7)
write$P9_RFSYNC(r0, &(0x7f0000000140)={0x7, 0x33, 0x2}, 0x7)
write$P9_RSYMLINK(r0, &(0x7f0000000180)={0x14, 0x11, 0x2, {0x8, 0x4, 0x5}}, 0x14)
write$P9_RXATTRWALK(r0, &(0x7f00000001c0)={0xf, 0x1f, 0x1, 0x4}, 0xf)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r1=>r0, {0x1}}, './file0\x00'})
write$P9_RXATTRCREATE(r1, &(0x7f0000000240)={0x7, 0x21, 0x2}, 0x7)
write$P9_RREADLINK(r0, &(0x7f0000000280)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)
write$P9_RFLUSH(r0, &(0x7f00000002c0)={0x7, 0x6d, 0x2}, 0x7)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000300)={{0x1, 0x1, 0x18, <r2=>r0}, './file0\x00'})
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x9)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, {<r4=>r0}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000380)={{0x1, 0x1, 0x18, r3, {r4}}, './file0\x00'})
write$P9_RVERSION(r1, &(0x7f00000003c0)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13)
r5 = fsmount(r1, 0x0, 0x1)
r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000000440)={{0x1, 0x1, 0x18, r6, @out_args}, './file0\x00'})

07:11:16 executing program 3:
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x1, 'gre0\x00', 0x2}, 0x18)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e20, @local}, {0x2, 0x4e20, @local}, {0x2, 0x4e23, @rand_addr=0x64010100}, 0x4, 0x0, 0x0, 0x0, 0x3f, &(0x7f0000000040)='sit0\x00', 0x0, 0x3, 0x6})
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
ioctl$RTC_UIE_OFF(r0, 0x7004)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'})
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r1=>r0, {0x5}}, './file0\x00'})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f00000001c0)={'tunl0\x00', 0x0, 0x80, 0x80, 0xd00a, 0x4, {{0x6, 0x4, 0x0, 0x3a, 0x18, 0x65, 0x0, 0x5, 0x2f, 0x0, @rand_addr=0x64010100, @empty, {[@end]}}}}})
ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r1, {0x7}}, './file0\x00'})
write$P9_RREAD(r2, &(0x7f0000000280)={0x40, 0x75, 0x1, {0x35, "9dcae8b907cf6af91013d1f49279d21e922f34b9f4043d7d106ef0185fbc37dbf2c971ae78e6e7379bc943ecbea2fd1a0e40d92cd6"}}, 0x40)
r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000300)={{0x1, 0x1, 0x18, <r4=>r3, {0x4}}, './file0\x00'})
socketpair(0x29, 0x800, 0x2, &(0x7f0000000340))
ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000380)={0x25, 0x20, 0x4, 0x12, 0x9, 0x8, 0x0, 0x24, 0x1})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000003c0)={{0x1, 0x1, 0x18, <r5=>r4}, './file0\x00'})
fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000400)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r6=>0x0}], 0x40, "08b4bae6edcdea"})
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000001400)={{r6, 0x1, 0x0, 0x7fff, 0x932972d, 0x8, 0x1000, 0x0, 0x3f, 0x9, 0x5, 0x3, 0x8e7, 0x7ff, 0x2}})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000002400)={{0x1, 0x1, 0x18, <r7=>0xffffffffffffffff, {0x9}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f0000002440)={{0x1, 0x1, 0x18, <r8=>r1}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r7, 0xc0189379, &(0x7f0000002480)={{0x1, 0x1, 0x18, r8}, './file0\x00'})

07:11:16 executing program 7:
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000040)='++{\xf4v\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff)
ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f00000000c0))
write$P9_RLOCK(r0, &(0x7f0000000100)={0x8, 0x35, 0x2, 0x1}, 0x8)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000140)='++{\xf4v\x00', &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r1=>r0, {0x69d}}, './file0\x00'})
write$P9_RCLUNK(r0, &(0x7f0000000200)={0x7, 0x79, 0x1}, 0x7)
write$P9_RREADLINK(r1, &(0x7f0000000240)={0x16, 0x17, 0x1, {0xd, './file0/file0'}}, 0x16)
r2 = fsmount(r1, 0x0, 0x70)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0x7}}, './file0/file0/file0\x00'})
write$9p(r0, &(0x7f00000002c0)="55a086551c2800119185cc494ad570a3fb37e7b0fc5ebaad11ff54373ed7aea7b587df90a62eafb3e2f18b974dd650074f334fcf264c69dd74", 0x39)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000300)={{0x1, 0x1, 0x18, <r3=>r2}, './file0/file0\x00'})
write$P9_RSYMLINK(r3, &(0x7f0000000340)={0x14, 0x11, 0x2, {0x80, 0x0, 0x8}}, 0x14)
fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f0000000380)='*\x00', &(0x7f00000003c0)='./file0\x00', r0)
r4 = socket$inet(0x2, 0x2, 0xc1f)
setsockopt$inet_group_source_req(r4, 0x0, 0x2b, &(0x7f0000000400)={0x6, {{0x2, 0x4e23, @empty}}, {{0x2, 0x4e24, @rand_addr=0x64010101}}}, 0x108)
pipe2$9p(&(0x7f0000000540)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80000)
write$P9_RWALK(r5, &(0x7f0000000580)={0x64, 0x6f, 0x1, {0x7, [{0x4, 0x3}, {0x1, 0x2, 0x5}, {0x80, 0x1, 0x1}, {0x40, 0x0, 0x8}, {0x2, 0x3, 0x4}, {0x1, 0x3, 0x8}, {0x10, 0x2, 0x3}]}}, 0x64)
write$P9_RUNLINKAT(r3, &(0x7f0000000600)={0x7, 0x4d, 0x1}, 0x7)
fspick(r1, &(0x7f0000000640)='./file0/file0\x00', 0x0)

07:11:16 executing program 4:
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000000)={{0x0, 0x7, 0x6, 0x2, 0x978, 0x0, 0x0, 0x62fc7f23, 0x0, 0x0, 0x92, 0x1, 0xba, 0x0, 0xa4}})
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000001000))
socketpair(0x29, 0x3, 0xd4e1, &(0x7f0000001040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000001080))
memfd_create(&(0x7f00000010c0)='\x00', 0x1)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000001100)='io.pressure\x00', 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000001140)={{0x1, 0x1, 0x18, <r3=>r0, {0x3}}, './file0\x00'})
write$P9_RCLUNK(r3, &(0x7f0000001180)={0x7, 0x79, 0x1}, 0x7)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f00000011c0)={{0x1, 0x1, 0x18, <r4=>r3, {0x9}}, './file0\x00'})
pipe2$9p(&(0x7f0000001200), 0x88000)
r5 = openat$cgroup_devices(r3, &(0x7f0000001240)='devices.deny\x00', 0x2, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000001280))
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000014c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_GET_KEY(r4, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x80, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xc8, 0x3b}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x24, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_SEQ={0x7, 0xa, "3a77e1"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_SEQ={0x12, 0xa, "0875afd37ba801dd599338a4c385"}]}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000001600)="3f6302e3292e36e1f50ff72e1ca192b7", 0x10)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000001640)={{0x1, 0x1, 0x18, <r7=>r0, {0x7}}, '\x00'})
ioctl$AUTOFS_DEV_IOCTL_VERSION(r7, 0xc0189371, &(0x7f0000001680)={{0x1, 0x1, 0x18, <r8=>r0}, './file0\x00'})
ioctl$EVIOCSKEYCODE(r8, 0x40084504, &(0x7f00000016c0)=[0x5, 0x1])

[   64.689022] audit: type=1400 audit(1768547476.533:7): avc:  denied  { execmem } for  pid=272 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
07:11:16 executing program 0:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x9, 0x80800)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000040)={0x0, ""/256, 0x0, <r1=>0x0})
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000240)={{<r2=>0x0, 0x2, 0x7f, 0x0, 0x3f, 0x1, 0x3, 0x8, 0x7, 0x99, 0x6, 0x5, 0x7, 0x9, 0x8}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000001240)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r3=>0x0}], 0x40, "22b9c4afd61e01"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002240)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r4=>0x0}], 0x8, "2d90bbddabcf99"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003240)={0x0, ""/256, 0x0, <r5=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000003440)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r6=>0x0}], 0x4, "f49520b81f1c2f"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000004440)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r7=>0x0}], 0x7f, "572715c03606e1"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000005440)={<r8=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000005640)={0x0, ""/256, <r9=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000005840)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r10=>0x0}], 0xa1, "fa19d3979abf24"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000006840)={0x5512, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r11=>0x0}], 0xff, "65b46eb6fff74a"})
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000007840)={{<r12=>0x0, 0x6, 0x8001, 0x1, 0x9, 0x7f, 0x1ff, 0x7, 0x100, 0x0, 0x1, 0x2, 0xdac, 0x1ff, 0x8}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000008840)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r13=>0x0}], 0x0, "6e8b9c32a096eb"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009840)={0x0, ""/256, 0x0, <r14=>0x0})
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000009a40)={{<r15=>0x0, 0x7ff, 0x2, 0x2, 0x4, 0x5, 0xfffffffffffffff8, 0x8, 0xe42b, 0x27, 0x8, 0xfff, 0x8, 0x4}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000000aa40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r16=>0x0}], 0x4, "265f3034cad1b9"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000065e40)={0xffffffff, [{}, {0x0, r1}, {}, {}, {}, {r2}, {}, {0x0, r3}, {}, {r4}, {}, {0x0, r5}, {}, {}, {}, {0x0, r6}, {0x0, r7}, {r8}, {}, {r9}, {}, {0x0, r10}, {}, {}, {}, {0x0, r11}, {r12}, {r13, r14}, {}, {}, {r15}, {}, {}, {0x0, r16}], 0x9, "6b398caedfd2bb"})

07:11:16 executing program 6:
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000000)='\x00', 0x0, r0)
r1 = syz_open_dev$rtc(&(0x7f0000000080), 0xffffffff, 0x200000)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000000c0)={0x0, ""/256, <r2=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000002c0)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r3=>0x0}], 0x26, "6398404f48d65f"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000012c0)={<r4=>0x0})
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000014c0)={{<r5=>0x0, 0x9, 0x7, 0x1000, 0x10000, 0xff, 0x47e4, 0x10001, 0x6, 0x6, 0xd37e00, 0x1, 0x2, 0x80000000, 0xc8}})
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000024c0)={{<r6=>0x0, 0x80, 0x4, 0x0, 0x3, 0x8, 0x9, 0x80000001, 0xff, 0x8000, 0x61a1835b, 0x8, 0xfffffffffffffff9, 0x6, 0x100000000}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000034c0)={0x100000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r7=>0x0}], 0x0, "f304c29834a001"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000044c0)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r8=>0x0}], 0x6, "9d8e228f075e65"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000054c0)={0x26d2e5dc, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r9=>0x0}], 0x5, "436ddf2e57c1f3"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000064c0)={0x0, ""/256, 0x0, <r10=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000066c0)={0xd4b, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r11=>0x0}], 0x7f, "5ddecd103853d4"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000076c0)={0x0, ""/256, 0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000078c0)={0x0, ""/256, 0x0, <r13=>0x0})
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000007ac0)={{<r14=>0x0, 0xd76, 0x3, 0x1f, 0x9, 0x40, 0x1, 0x7, 0x9, 0x4ed6e066, 0x7, 0x5, 0x0, 0x72a38a4a}})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000008ac0)={0x0, ""/256, 0x0, <r15=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000008cc0)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r16=>0x0}], 0x7f, "4f940821208b3b"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000009cc0)={0x0, ""/256, 0x0, <r17=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f000005acc0)={0xa, [{}, {}, {}, {}, {}, {r2}, {r3}, {r4}, {r5}, {r6}, {0x0, r7}, {}, {0x0, r8}, {}, {0x0, r9}, {}, {0x0, r10}, {}, {r11}, {0x0, r12}, {0x0, r13}, {r14, r15}, {0x0, r16}, {}, {0x0, r17}], 0x27, "547722d3843688"})

[   65.851893] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   65.855629] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   65.857514] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   65.860880] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   65.863809] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   65.914566] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   65.923285] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   65.925508] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   65.929510] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   65.934356] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   65.997543] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   66.002505] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   66.004289] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   66.006227] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   66.010261] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   66.018516] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   66.022929] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   66.027724] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   66.036706] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   66.039493] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   66.049496] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   66.067480] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   66.069716] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   66.071667] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   66.074422] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   66.078312] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   66.080216] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   66.083414] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   66.085200] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   66.090362] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   66.152804] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   66.183714] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   66.185542] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   66.187466] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   66.188689] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   66.197250] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   66.204500] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   66.231138] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   66.239264] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   66.243798] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   67.887028] Bluetooth: hci0: command tx timeout
[   67.950672] Bluetooth: hci1: command tx timeout
[   68.078023] Bluetooth: hci3: command tx timeout
[   68.078706] Bluetooth: hci2: command tx timeout
[   68.142442] Bluetooth: hci4: command tx timeout
[   68.142907] Bluetooth: hci5: command tx timeout
[   68.269178] Bluetooth: hci6: command tx timeout
[   68.334213] Bluetooth: hci7: command tx timeout
[   69.934526] Bluetooth: hci0: command tx timeout
[   69.998018] Bluetooth: hci1: command tx timeout
[   70.127025] Bluetooth: hci2: command tx timeout
[   70.127447] Bluetooth: hci3: command tx timeout
[   70.190018] Bluetooth: hci5: command tx timeout
[   70.190426] Bluetooth: hci4: command tx timeout
[   70.320047] Bluetooth: hci6: command tx timeout
[   70.382367] Bluetooth: hci7: command tx timeout
[   71.981012] Bluetooth: hci0: command tx timeout
[   72.046035] Bluetooth: hci1: command tx timeout
[   72.174022] Bluetooth: hci3: command tx timeout
[   72.174463] Bluetooth: hci2: command tx timeout
[   72.238029] Bluetooth: hci4: command tx timeout
[   72.238438] Bluetooth: hci5: command tx timeout
[   72.366005] Bluetooth: hci6: command tx timeout
[   72.430990] Bluetooth: hci7: command tx timeout
[   74.030087] Bluetooth: hci0: command tx timeout
[   74.094034] Bluetooth: hci1: command tx timeout
[   74.221665] Bluetooth: hci2: command tx timeout
[   74.222194] Bluetooth: hci3: command tx timeout
[   74.285018] Bluetooth: hci5: command tx timeout
[   74.285438] Bluetooth: hci4: command tx timeout
[   74.413218] Bluetooth: hci6: command tx timeout
[   74.478089] Bluetooth: hci7: command tx timeout
[  101.747618] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.753994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.922135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.923258] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.978599] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.979281] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
07:11:54 executing program 4:
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000000)={{0x0, 0x7, 0x6, 0x2, 0x978, 0x0, 0x0, 0x62fc7f23, 0x0, 0x0, 0x92, 0x1, 0xba, 0x0, 0xa4}})
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000001000))
socketpair(0x29, 0x3, 0xd4e1, &(0x7f0000001040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000001080))
memfd_create(&(0x7f00000010c0)='\x00', 0x1)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000001100)='io.pressure\x00', 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000001140)={{0x1, 0x1, 0x18, <r3=>r0, {0x3}}, './file0\x00'})
write$P9_RCLUNK(r3, &(0x7f0000001180)={0x7, 0x79, 0x1}, 0x7)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f00000011c0)={{0x1, 0x1, 0x18, <r4=>r3, {0x9}}, './file0\x00'})
pipe2$9p(&(0x7f0000001200), 0x88000)
r5 = openat$cgroup_devices(r3, &(0x7f0000001240)='devices.deny\x00', 0x2, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000001280))
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000014c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_GET_KEY(r4, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x80, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xc8, 0x3b}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x24, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_SEQ={0x7, 0xa, "3a77e1"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_SEQ={0x12, 0xa, "0875afd37ba801dd599338a4c385"}]}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000001600)="3f6302e3292e36e1f50ff72e1ca192b7", 0x10)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000001640)={{0x1, 0x1, 0x18, <r7=>r0, {0x7}}, '\x00'})
ioctl$AUTOFS_DEV_IOCTL_VERSION(r7, 0xc0189371, &(0x7f0000001680)={{0x1, 0x1, 0x18, <r8=>r0}, './file0\x00'})
ioctl$EVIOCSKEYCODE(r8, 0x40084504, &(0x7f00000016c0)=[0x5, 0x1])

07:11:54 executing program 4:
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000000)={{0x0, 0x7, 0x6, 0x2, 0x978, 0x0, 0x0, 0x62fc7f23, 0x0, 0x0, 0x92, 0x1, 0xba, 0x0, 0xa4}})
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000001000))
socketpair(0x29, 0x3, 0xd4e1, &(0x7f0000001040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000001080))
memfd_create(&(0x7f00000010c0)='\x00', 0x1)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000001100)='io.pressure\x00', 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000001140)={{0x1, 0x1, 0x18, <r3=>r0, {0x3}}, './file0\x00'})
write$P9_RCLUNK(r3, &(0x7f0000001180)={0x7, 0x79, 0x1}, 0x7)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f00000011c0)={{0x1, 0x1, 0x18, <r4=>r3, {0x9}}, './file0\x00'})
pipe2$9p(&(0x7f0000001200), 0x88000)
r5 = openat$cgroup_devices(r3, &(0x7f0000001240)='devices.deny\x00', 0x2, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000001280))
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000014c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_GET_KEY(r4, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x80, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xc8, 0x3b}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x24, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_SEQ={0x7, 0xa, "3a77e1"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_SEQ={0x12, 0xa, "0875afd37ba801dd599338a4c385"}]}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000001600)="3f6302e3292e36e1f50ff72e1ca192b7", 0x10)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000001640)={{0x1, 0x1, 0x18, <r7=>r0, {0x7}}, '\x00'})
ioctl$AUTOFS_DEV_IOCTL_VERSION(r7, 0xc0189371, &(0x7f0000001680)={{0x1, 0x1, 0x18, <r8=>r0}, './file0\x00'})
ioctl$EVIOCSKEYCODE(r8, 0x40084504, &(0x7f00000016c0)=[0x5, 0x1])

[  103.149621] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  103.151067] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
07:11:55 executing program 4:
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000000)={{0x0, 0x7, 0x6, 0x2, 0x978, 0x0, 0x0, 0x62fc7f23, 0x0, 0x0, 0x92, 0x1, 0xba, 0x0, 0xa4}})
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000001000))
socketpair(0x29, 0x3, 0xd4e1, &(0x7f0000001040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000001080))
memfd_create(&(0x7f00000010c0)='\x00', 0x1)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000001100)='io.pressure\x00', 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000001140)={{0x1, 0x1, 0x18, <r3=>r0, {0x3}}, './file0\x00'})
write$P9_RCLUNK(r3, &(0x7f0000001180)={0x7, 0x79, 0x1}, 0x7)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f00000011c0)={{0x1, 0x1, 0x18, <r4=>r3, {0x9}}, './file0\x00'})
pipe2$9p(&(0x7f0000001200), 0x88000)
r5 = openat$cgroup_devices(r3, &(0x7f0000001240)='devices.deny\x00', 0x2, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000001280))
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000014c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_GET_KEY(r4, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x80, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xc8, 0x3b}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x24, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_SEQ={0x7, 0xa, "3a77e1"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_SEQ={0x12, 0xa, "0875afd37ba801dd599338a4c385"}]}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000001600)="3f6302e3292e36e1f50ff72e1ca192b7", 0x10)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000001640)={{0x1, 0x1, 0x18, <r7=>r0, {0x7}}, '\x00'})
ioctl$AUTOFS_DEV_IOCTL_VERSION(r7, 0xc0189371, &(0x7f0000001680)={{0x1, 0x1, 0x18, <r8=>r0}, './file0\x00'})
ioctl$EVIOCSKEYCODE(r8, 0x40084504, &(0x7f00000016c0)=[0x5, 0x1])

07:11:55 executing program 4:
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000000)={{0x0, 0x7, 0x6, 0x2, 0x978, 0x0, 0x0, 0x62fc7f23, 0x0, 0x0, 0x92, 0x1, 0xba, 0x0, 0xa4}})
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000001000))
socketpair(0x29, 0x3, 0xd4e1, &(0x7f0000001040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000001080))
memfd_create(&(0x7f00000010c0)='\x00', 0x1)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000001100)='io.pressure\x00', 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000001140)={{0x1, 0x1, 0x18, <r3=>r0, {0x3}}, './file0\x00'})
write$P9_RCLUNK(r3, &(0x7f0000001180)={0x7, 0x79, 0x1}, 0x7)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f00000011c0)={{0x1, 0x1, 0x18, <r4=>r3, {0x9}}, './file0\x00'})
pipe2$9p(&(0x7f0000001200), 0x88000)
r5 = openat$cgroup_devices(r3, &(0x7f0000001240)='devices.deny\x00', 0x2, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000001280))
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000014c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_GET_KEY(r4, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x80, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xc8, 0x3b}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x24, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_SEQ={0x7, 0xa, "3a77e1"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_SEQ={0x12, 0xa, "0875afd37ba801dd599338a4c385"}]}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000001600)="3f6302e3292e36e1f50ff72e1ca192b7", 0x10)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000001640)={{0x1, 0x1, 0x18, <r7=>r0, {0x7}}, '\x00'})
ioctl$AUTOFS_DEV_IOCTL_VERSION(r7, 0xc0189371, &(0x7f0000001680)={{0x1, 0x1, 0x18, r0}, './file0\x00'})

07:11:55 executing program 4:
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000000)={{0x0, 0x7, 0x6, 0x2, 0x978, 0x0, 0x0, 0x62fc7f23, 0x0, 0x0, 0x92, 0x1, 0xba, 0x0, 0xa4}})
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000001000))
socketpair(0x29, 0x3, 0xd4e1, &(0x7f0000001040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000001080))
memfd_create(&(0x7f00000010c0)='\x00', 0x1)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000001100)='io.pressure\x00', 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000001140)={{0x1, 0x1, 0x18, <r3=>r0, {0x3}}, './file0\x00'})
write$P9_RCLUNK(r3, &(0x7f0000001180)={0x7, 0x79, 0x1}, 0x7)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f00000011c0)={{0x1, 0x1, 0x18, <r4=>r3, {0x9}}, './file0\x00'})
pipe2$9p(&(0x7f0000001200), 0x88000)
r5 = openat$cgroup_devices(r3, &(0x7f0000001240)='devices.deny\x00', 0x2, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000001280))
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000014c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_GET_KEY(r4, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x80, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xc8, 0x3b}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x24, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_SEQ={0x7, 0xa, "3a77e1"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_SEQ={0x12, 0xa, "0875afd37ba801dd599338a4c385"}]}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000001600)="3f6302e3292e36e1f50ff72e1ca192b7", 0x10)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000001640)={{0x1, 0x1, 0x18, r0, {0x7}}, '\x00'})

07:11:55 executing program 3:
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x1, 'gre0\x00', 0x2}, 0x18)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e20, @local}, {0x2, 0x4e20, @local}, {0x2, 0x4e23, @rand_addr=0x64010100}, 0x4, 0x0, 0x0, 0x0, 0x3f, &(0x7f0000000040)='sit0\x00', 0x0, 0x3, 0x6})
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
ioctl$RTC_UIE_OFF(r0, 0x7004)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'})
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r1=>r0, {0x5}}, './file0\x00'})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f00000001c0)={'tunl0\x00', 0x0, 0x80, 0x80, 0xd00a, 0x4, {{0x6, 0x4, 0x0, 0x3a, 0x18, 0x65, 0x0, 0x5, 0x2f, 0x0, @rand_addr=0x64010100, @empty, {[@end]}}}}})
ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r1, {0x7}}, './file0\x00'})
write$P9_RREAD(r2, &(0x7f0000000280)={0x40, 0x75, 0x1, {0x35, "9dcae8b907cf6af91013d1f49279d21e922f34b9f4043d7d106ef0185fbc37dbf2c971ae78e6e7379bc943ecbea2fd1a0e40d92cd6"}}, 0x40)
r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000300)={{0x1, 0x1, 0x18, <r4=>r3, {0x4}}, './file0\x00'})
socketpair(0x29, 0x800, 0x2, &(0x7f0000000340))
ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000380)={0x25, 0x20, 0x4, 0x12, 0x9, 0x8, 0x0, 0x24, 0x1})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000003c0)={{0x1, 0x1, 0x18, <r5=>r4}, './file0\x00'})
fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000400)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r6=>0x0}], 0x40, "08b4bae6edcdea"})
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000001400)={{r6, 0x1, 0x0, 0x7fff, 0x932972d, 0x8, 0x1000, 0x0, 0x3f, 0x9, 0x5, 0x3, 0x8e7, 0x7ff, 0x2}})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000002400)={{0x1, 0x1, 0x18, <r7=>0xffffffffffffffff, {0x9}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f0000002440)={{0x1, 0x1, 0x18, <r8=>r1}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r7, 0xc0189379, &(0x7f0000002480)={{0x1, 0x1, 0x18, r8}, './file0\x00'})

07:11:56 executing program 4:
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000000)={{0x0, 0x7, 0x6, 0x2, 0x978, 0x0, 0x0, 0x62fc7f23, 0x0, 0x0, 0x92, 0x1, 0xba, 0x0, 0xa4}})
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000001000))
socketpair(0x29, 0x3, 0xd4e1, &(0x7f0000001040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000001080))
memfd_create(&(0x7f00000010c0)='\x00', 0x1)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000001100)='io.pressure\x00', 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000001140)={{0x1, 0x1, 0x18, <r3=>r0, {0x3}}, './file0\x00'})
write$P9_RCLUNK(r3, &(0x7f0000001180)={0x7, 0x79, 0x1}, 0x7)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f00000011c0)={{0x1, 0x1, 0x18, <r4=>r3, {0x9}}, './file0\x00'})
pipe2$9p(&(0x7f0000001200), 0x88000)
r5 = openat$cgroup_devices(r3, &(0x7f0000001240)='devices.deny\x00', 0x2, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000001280))
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000014c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_GET_KEY(r4, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x80, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xc8, 0x3b}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x24, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_SEQ={0x7, 0xa, "3a77e1"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_SEQ={0x12, 0xa, "0875afd37ba801dd599338a4c385"}]}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000001600)="3f6302e3292e36e1f50ff72e1ca192b7", 0x10)

07:11:56 executing program 3:
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x1, 'gre0\x00', 0x2}, 0x18)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e20, @local}, {0x2, 0x4e20, @local}, {0x2, 0x4e23, @rand_addr=0x64010100}, 0x4, 0x0, 0x0, 0x0, 0x3f, &(0x7f0000000040)='sit0\x00', 0x0, 0x3, 0x6})
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
ioctl$RTC_UIE_OFF(r0, 0x7004)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'})
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r1=>r0, {0x5}}, './file0\x00'})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f00000001c0)={'tunl0\x00', 0x0, 0x80, 0x80, 0xd00a, 0x4, {{0x6, 0x4, 0x0, 0x3a, 0x18, 0x65, 0x0, 0x5, 0x2f, 0x0, @rand_addr=0x64010100, @empty, {[@end]}}}}})
ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r1, {0x7}}, './file0\x00'})
write$P9_RREAD(r2, &(0x7f0000000280)={0x40, 0x75, 0x1, {0x35, "9dcae8b907cf6af91013d1f49279d21e922f34b9f4043d7d106ef0185fbc37dbf2c971ae78e6e7379bc943ecbea2fd1a0e40d92cd6"}}, 0x40)
r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000300)={{0x1, 0x1, 0x18, <r4=>r3, {0x4}}, './file0\x00'})
socketpair(0x29, 0x800, 0x2, &(0x7f0000000340))
ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000380)={0x25, 0x20, 0x4, 0x12, 0x9, 0x8, 0x0, 0x24, 0x1})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000003c0)={{0x1, 0x1, 0x18, <r5=>r4}, './file0\x00'})
fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000400)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r6=>0x0}], 0x40, "08b4bae6edcdea"})
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000001400)={{r6, 0x1, 0x0, 0x7fff, 0x932972d, 0x8, 0x1000, 0x0, 0x3f, 0x9, 0x5, 0x3, 0x8e7, 0x7ff, 0x2}})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000002400)={{0x1, 0x1, 0x18, <r7=>0xffffffffffffffff, {0x9}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f0000002440)={{0x1, 0x1, 0x18, <r8=>r1}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r7, 0xc0189379, &(0x7f0000002480)={{0x1, 0x1, 0x18, r8}, './file0\x00'})

[  104.973275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  104.974474] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  105.204187] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  105.205335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  105.533260] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  105.533875] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  105.643904] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  105.644564] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  105.764016] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  105.764634] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  105.824987] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  105.825586] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  105.867445] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  105.868990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  105.967369] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  105.968310] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  106.087452] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  106.088119] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  106.130666] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  106.131277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  106.455376] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  106.460895] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  106.487309] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  106.488635] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
07:12:11 executing program 3:
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x1, 'gre0\x00', 0x2}, 0x18)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e20, @local}, {0x2, 0x4e20, @local}, {0x2, 0x4e23, @rand_addr=0x64010100}, 0x4, 0x0, 0x0, 0x0, 0x3f, &(0x7f0000000040)='sit0\x00', 0x0, 0x3, 0x6})
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
ioctl$RTC_UIE_OFF(r0, 0x7004)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'})
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r1=>r0, {0x5}}, './file0\x00'})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f00000001c0)={'tunl0\x00', 0x0, 0x80, 0x80, 0xd00a, 0x4, {{0x6, 0x4, 0x0, 0x3a, 0x18, 0x65, 0x0, 0x5, 0x2f, 0x0, @rand_addr=0x64010100, @empty, {[@end]}}}}})
ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r1, {0x7}}, './file0\x00'})
write$P9_RREAD(r2, &(0x7f0000000280)={0x40, 0x75, 0x1, {0x35, "9dcae8b907cf6af91013d1f49279d21e922f34b9f4043d7d106ef0185fbc37dbf2c971ae78e6e7379bc943ecbea2fd1a0e40d92cd6"}}, 0x40)
r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000300)={{0x1, 0x1, 0x18, <r4=>r3, {0x4}}, './file0\x00'})
socketpair(0x29, 0x800, 0x2, &(0x7f0000000340))
ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000380)={0x25, 0x20, 0x4, 0x12, 0x9, 0x8, 0x0, 0x24, 0x1})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000003c0)={{0x1, 0x1, 0x18, <r5=>r4}, './file0\x00'})
fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000400)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r6=>0x0}], 0x40, "08b4bae6edcdea"})
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000001400)={{r6, 0x1, 0x0, 0x7fff, 0x932972d, 0x8, 0x1000, 0x0, 0x3f, 0x9, 0x5, 0x3, 0x8e7, 0x7ff, 0x2}})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000002400)={{0x1, 0x1, 0x18, <r7=>0xffffffffffffffff, {0x9}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f0000002440)={{0x1, 0x1, 0x18, <r8=>r1}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r7, 0xc0189379, &(0x7f0000002480)={{0x1, 0x1, 0x18, r8}, './file0\x00'})

07:12:11 executing program 1:
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x9)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000))
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
write$P9_RLOPEN(r1, &(0x7f0000000080)={0x18, 0xd, 0x2, {{0x10, 0x0, 0x1}, 0xf08}}, 0x18)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff, {0x9}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {0x8}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r4=>r0, {0x6}}, './file0\x00'})
r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x12400, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r6=>r4, {<r7=>0xffffffffffffffff}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r8=>r7, {0x200000}}, './file0/file0\x00'})
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000240)={{0x0, 0x7, 0x85c, 0x8, 0x0, 0x81, 0xfe, 0xd4b4, 0x7, 0x8, 0xff, 0x8001, 0x0, 0x3, 0x100000001}})
r9 = fsmount(r2, 0x1, 0x4)
ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000001240)={0x7, 0x4d, 0x1}, 0x7)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000001280)={{0x1, 0x1, 0x18, r3, {0x10}}, './file0\x00'})
r10 = syz_open_dev$rtc(&(0x7f00000012c0), 0x60ff, 0x575100)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r8, 0xc018937a, &(0x7f0000001300)={{0x1, 0x1, 0x18, r10, {0x2}}, './file1\x00'})
r11 = syz_open_dev$evdev(&(0x7f0000001340), 0x4, 0x400)
ioctl$EVIOCREVOKE(r11, 0x40044591, &(0x7f0000001380)=0x8)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000001400)={{0x1, 0x1, 0x18, r0, {r1}}, './file0/file0\x00'})

07:12:11 executing program 6:
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000000)='\x00', 0x0, r0)
r1 = syz_open_dev$rtc(&(0x7f0000000080), 0xffffffff, 0x200000)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000000c0)={0x0, ""/256, <r2=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000002c0)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r3=>0x0}], 0x26, "6398404f48d65f"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000012c0)={<r4=>0x0})
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000014c0)={{<r5=>0x0, 0x9, 0x7, 0x1000, 0x10000, 0xff, 0x47e4, 0x10001, 0x6, 0x6, 0xd37e00, 0x1, 0x2, 0x80000000, 0xc8}})
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000024c0)={{<r6=>0x0, 0x80, 0x4, 0x0, 0x3, 0x8, 0x9, 0x80000001, 0xff, 0x8000, 0x61a1835b, 0x8, 0xfffffffffffffff9, 0x6, 0x100000000}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000034c0)={0x100000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r7=>0x0}], 0x0, "f304c29834a001"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000044c0)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r8=>0x0}], 0x6, "9d8e228f075e65"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000054c0)={0x26d2e5dc, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r9=>0x0}], 0x5, "436ddf2e57c1f3"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000064c0)={0x0, ""/256, 0x0, <r10=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000066c0)={0xd4b, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r11=>0x0}], 0x7f, "5ddecd103853d4"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000076c0)={0x0, ""/256, 0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000078c0)={0x0, ""/256, 0x0, <r13=>0x0})
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000007ac0)={{<r14=>0x0, 0xd76, 0x3, 0x1f, 0x9, 0x40, 0x1, 0x7, 0x9, 0x4ed6e066, 0x7, 0x5, 0x0, 0x72a38a4a}})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000008ac0)={0x0, ""/256, 0x0, <r15=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000008cc0)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r16=>0x0}], 0x7f, "4f940821208b3b"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000009cc0)={0x0, ""/256, 0x0, <r17=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f000005acc0)={0xa, [{}, {}, {}, {}, {}, {r2}, {r3}, {r4}, {r5}, {r6}, {0x0, r7}, {}, {0x0, r8}, {}, {0x0, r9}, {}, {0x0, r10}, {}, {r11}, {0x0, r12}, {0x0, r13}, {r14, r15}, {0x0, r16}, {}, {0x0, r17}], 0x27, "547722d3843688"})

07:12:11 executing program 5:
write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x33, 0x2}, 0x7)
write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000080)={0x57, 0x6f, 0x1, {0x6, [{0x0, 0x1, 0x6}, {0x2, 0x0, 0x3}, {0x0, 0x0, 0x6}, {0x80, 0x0, 0x1}, {0x0, 0x0, 0x7}, {0x60, 0x4, 0x2}]}}, 0x57)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
write$P9_RXATTRWALK(r0, &(0x7f0000000140)={0xf, 0x1f, 0x2, 0x4}, 0xf)
write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8)
write$P9_RLOPEN(r0, &(0x7f00000001c0)={0x18, 0xd, 0x2, {{0x8, 0x0, 0x2}}}, 0x18)
ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000200)=""/53)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0)
r2 = getuid()
getresgid(&(0x7f0000000280), &(0x7f00000002c0)=<r3=>0x0, &(0x7f0000000300)=<r4=>0x0)
write$P9_RSTATu(r1, &(0x7f0000000340)={0x64, 0x7d, 0x1, {{0x0, 0x4e, 0x0, 0x8, {0x1, 0x4, 0x5}, 0x10080000, 0x8e, 0x40, 0x7, 0x3, ',]{', 0xd, ')$-:\\-+/-@--%', 0x3, '%\xa5 ', 0x8, '\\!%^{-^\\'}, 0x1, '{', r2, r3}}, 0x64)
write$P9_RFSYNC(r1, &(0x7f00000003c0)={0x7, 0x33, 0x4b7a}, 0x7)
keyctl$session_to_parent(0x12)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'})
write$P9_RMKNOD(r1, &(0x7f0000000440)={0x14, 0x13, 0x1, {0x20, 0x0, 0x1}}, 0x14)
r5 = syz_open_dev$evdev(&(0x7f0000000480), 0x800, 0x200)
ioctl$EVIOCGSW(r5, 0x8040451b, &(0x7f00000004c0)=""/169)
setregid(r4, 0xee01)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000580)={{0x1, 0x1, 0x18}, './file0\x00'})

07:12:11 executing program 7:
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000040)='++{\xf4v\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff)
ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f00000000c0))
write$P9_RLOCK(r0, &(0x7f0000000100)={0x8, 0x35, 0x2, 0x1}, 0x8)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000140)='++{\xf4v\x00', &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r1=>r0, {0x69d}}, './file0\x00'})
write$P9_RCLUNK(r0, &(0x7f0000000200)={0x7, 0x79, 0x1}, 0x7)
write$P9_RREADLINK(r1, &(0x7f0000000240)={0x16, 0x17, 0x1, {0xd, './file0/file0'}}, 0x16)
r2 = fsmount(r1, 0x0, 0x70)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0x7}}, './file0/file0/file0\x00'})
write$9p(r0, &(0x7f00000002c0)="55a086551c2800119185cc494ad570a3fb37e7b0fc5ebaad11ff54373ed7aea7b587df90a62eafb3e2f18b974dd650074f334fcf264c69dd74", 0x39)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000300)={{0x1, 0x1, 0x18, <r3=>r2}, './file0/file0\x00'})
write$P9_RSYMLINK(r3, &(0x7f0000000340)={0x14, 0x11, 0x2, {0x80, 0x0, 0x8}}, 0x14)
fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f0000000380)='*\x00', &(0x7f00000003c0)='./file0\x00', r0)
r4 = socket$inet(0x2, 0x2, 0xc1f)
setsockopt$inet_group_source_req(r4, 0x0, 0x2b, &(0x7f0000000400)={0x6, {{0x2, 0x4e23, @empty}}, {{0x2, 0x4e24, @rand_addr=0x64010101}}}, 0x108)
pipe2$9p(&(0x7f0000000540)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80000)
write$P9_RWALK(r5, &(0x7f0000000580)={0x64, 0x6f, 0x1, {0x7, [{0x4, 0x3}, {0x1, 0x2, 0x5}, {0x80, 0x1, 0x1}, {0x40, 0x0, 0x8}, {0x2, 0x3, 0x4}, {0x1, 0x3, 0x8}, {0x10, 0x2, 0x3}]}}, 0x64)
write$P9_RUNLINKAT(r3, &(0x7f0000000600)={0x7, 0x4d, 0x1}, 0x7)
fspick(r1, &(0x7f0000000640)='./file0/file0\x00', 0x0)

07:12:11 executing program 2:
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)={0x13, 0x65, 0xffff, 0xa, 0x6, '9P2000'}, 0x13)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
write$P9_RLOPEN(r0, &(0x7f0000000080)={0x18, 0xd, 0x1, {{0x0, 0x2, 0x2}, 0x1}}, 0x18)
write$P9_RFLUSH(r0, &(0x7f00000000c0)={0x7, 0x6d, 0x1}, 0x7)
write$P9_RFLUSH(r0, &(0x7f0000000100)={0x7, 0x6d, 0x2}, 0x7)
write$P9_RFSYNC(r0, &(0x7f0000000140)={0x7, 0x33, 0x2}, 0x7)
write$P9_RSYMLINK(r0, &(0x7f0000000180)={0x14, 0x11, 0x2, {0x8, 0x4, 0x5}}, 0x14)
write$P9_RXATTRWALK(r0, &(0x7f00000001c0)={0xf, 0x1f, 0x1, 0x4}, 0xf)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r1=>r0, {0x1}}, './file0\x00'})
write$P9_RXATTRCREATE(r1, &(0x7f0000000240)={0x7, 0x21, 0x2}, 0x7)
write$P9_RREADLINK(r0, &(0x7f0000000280)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)
write$P9_RFLUSH(r0, &(0x7f00000002c0)={0x7, 0x6d, 0x2}, 0x7)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000300)={{0x1, 0x1, 0x18, <r2=>r0}, './file0\x00'})
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x9)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, {<r4=>r0}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000380)={{0x1, 0x1, 0x18, r3, {r4}}, './file0\x00'})
write$P9_RVERSION(r1, &(0x7f00000003c0)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13)
r5 = fsmount(r1, 0x0, 0x1)
r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000000440)={{0x1, 0x1, 0x18, r6, @out_args}, './file0\x00'})

07:12:11 executing program 4:
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000000)={{0x0, 0x7, 0x6, 0x2, 0x978, 0x0, 0x0, 0x62fc7f23, 0x0, 0x0, 0x92, 0x1, 0xba, 0x0, 0xa4}})
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000001000))
socketpair(0x29, 0x3, 0xd4e1, &(0x7f0000001040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000001080))
memfd_create(&(0x7f00000010c0)='\x00', 0x1)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000001100)='io.pressure\x00', 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000001140)={{0x1, 0x1, 0x18, <r3=>r0, {0x3}}, './file0\x00'})
write$P9_RCLUNK(r3, &(0x7f0000001180)={0x7, 0x79, 0x1}, 0x7)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f00000011c0)={{0x1, 0x1, 0x18, r3, {0x9}}, './file0\x00'})
pipe2$9p(&(0x7f0000001200), 0x88000)
r4 = openat$cgroup_devices(r3, &(0x7f0000001240)='devices.deny\x00', 0x2, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000001280))
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000014c0)={'wlan1\x00'})
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000001600)="3f6302e3292e36e1f50ff72e1ca192b7", 0x10)

07:12:11 executing program 0:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x9, 0x80800)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000040)={0x0, ""/256, 0x0, <r1=>0x0})
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000240)={{<r2=>0x0, 0x2, 0x7f, 0x0, 0x3f, 0x1, 0x3, 0x8, 0x7, 0x99, 0x6, 0x5, 0x7, 0x9, 0x8}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000001240)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r3=>0x0}], 0x40, "22b9c4afd61e01"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002240)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r4=>0x0}], 0x8, "2d90bbddabcf99"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003240)={0x0, ""/256, 0x0, <r5=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000003440)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r6=>0x0}], 0x4, "f49520b81f1c2f"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000004440)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r7=>0x0}], 0x7f, "572715c03606e1"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000005440)={<r8=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000005640)={0x0, ""/256, <r9=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000005840)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r10=>0x0}], 0xa1, "fa19d3979abf24"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000006840)={0x5512, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r11=>0x0}], 0xff, "65b46eb6fff74a"})
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000007840)={{<r12=>0x0, 0x6, 0x8001, 0x1, 0x9, 0x7f, 0x1ff, 0x7, 0x100, 0x0, 0x1, 0x2, 0xdac, 0x1ff, 0x8}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000008840)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r13=>0x0}], 0x0, "6e8b9c32a096eb"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009840)={0x0, ""/256, 0x0, <r14=>0x0})
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000009a40)={{<r15=>0x0, 0x7ff, 0x2, 0x2, 0x4, 0x5, 0xfffffffffffffff8, 0x8, 0xe42b, 0x27, 0x8, 0xfff, 0x8, 0x4}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000000aa40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r16=>0x0}], 0x4, "265f3034cad1b9"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000065e40)={0xffffffff, [{}, {0x0, r1}, {}, {}, {}, {r2}, {}, {0x0, r3}, {}, {r4}, {}, {0x0, r5}, {}, {}, {}, {0x0, r6}, {0x0, r7}, {r8}, {}, {r9}, {}, {0x0, r10}, {}, {}, {}, {0x0, r11}, {r12}, {r13, r14}, {}, {}, {r15}, {}, {}, {0x0, r16}], 0x9, "6b398caedfd2bb"})

07:12:11 executing program 7:
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000040)='++{\xf4v\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff)
ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f00000000c0))
write$P9_RLOCK(r0, &(0x7f0000000100)={0x8, 0x35, 0x2, 0x1}, 0x8)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000140)='++{\xf4v\x00', &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r1=>r0, {0x69d}}, './file0\x00'})
write$P9_RCLUNK(r0, &(0x7f0000000200)={0x7, 0x79, 0x1}, 0x7)
write$P9_RREADLINK(r1, &(0x7f0000000240)={0x16, 0x17, 0x1, {0xd, './file0/file0'}}, 0x16)
r2 = fsmount(r1, 0x0, 0x70)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0x7}}, './file0/file0/file0\x00'})
write$9p(r0, &(0x7f00000002c0)="55a086551c2800119185cc494ad570a3fb37e7b0fc5ebaad11ff54373ed7aea7b587df90a62eafb3e2f18b974dd650074f334fcf264c69dd74", 0x39)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000300)={{0x1, 0x1, 0x18, <r3=>r2}, './file0/file0\x00'})
write$P9_RSYMLINK(r3, &(0x7f0000000340)={0x14, 0x11, 0x2, {0x80, 0x0, 0x8}}, 0x14)
fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f0000000380)='*\x00', &(0x7f00000003c0)='./file0\x00', r0)
r4 = socket$inet(0x2, 0x2, 0xc1f)
setsockopt$inet_group_source_req(r4, 0x0, 0x2b, &(0x7f0000000400)={0x6, {{0x2, 0x4e23, @empty}}, {{0x2, 0x4e24, @rand_addr=0x64010101}}}, 0x108)
pipe2$9p(&(0x7f0000000540)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80000)
write$P9_RWALK(r5, &(0x7f0000000580)={0x64, 0x6f, 0x1, {0x7, [{0x4, 0x3}, {0x1, 0x2, 0x5}, {0x80, 0x1, 0x1}, {0x40, 0x0, 0x8}, {0x2, 0x3, 0x4}, {0x1, 0x3, 0x8}, {0x10, 0x2, 0x3}]}}, 0x64)
write$P9_RUNLINKAT(r3, &(0x7f0000000600)={0x7, 0x4d, 0x1}, 0x7)
fspick(r1, &(0x7f0000000640)='./file0/file0\x00', 0x0)

07:12:11 executing program 1:
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x9)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000))
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
write$P9_RLOPEN(r1, &(0x7f0000000080)={0x18, 0xd, 0x2, {{0x10, 0x0, 0x1}, 0xf08}}, 0x18)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff, {0x9}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {0x8}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r4=>r0, {0x6}}, './file0\x00'})
r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x12400, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r6=>r4, {<r7=>0xffffffffffffffff}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r8=>r7, {0x200000}}, './file0/file0\x00'})
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000240)={{0x0, 0x7, 0x85c, 0x8, 0x0, 0x81, 0xfe, 0xd4b4, 0x7, 0x8, 0xff, 0x8001, 0x0, 0x3, 0x100000001}})
r9 = fsmount(r2, 0x1, 0x4)
ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000001240)={0x7, 0x4d, 0x1}, 0x7)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000001280)={{0x1, 0x1, 0x18, r3, {0x10}}, './file0\x00'})
r10 = syz_open_dev$rtc(&(0x7f00000012c0), 0x60ff, 0x575100)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r8, 0xc018937a, &(0x7f0000001300)={{0x1, 0x1, 0x18, r10, {0x2}}, './file1\x00'})
r11 = syz_open_dev$evdev(&(0x7f0000001340), 0x4, 0x400)
ioctl$EVIOCREVOKE(r11, 0x40044591, &(0x7f0000001380)=0x8)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000001400)={{0x1, 0x1, 0x18, r0, {r1}}, './file0/file0\x00'})

07:12:11 executing program 6:
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000000)='\x00', 0x0, r0)
r1 = syz_open_dev$rtc(&(0x7f0000000080), 0xffffffff, 0x200000)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000000c0)={0x0, ""/256, <r2=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000002c0)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r3=>0x0}], 0x26, "6398404f48d65f"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000012c0)={<r4=>0x0})
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000014c0)={{<r5=>0x0, 0x9, 0x7, 0x1000, 0x10000, 0xff, 0x47e4, 0x10001, 0x6, 0x6, 0xd37e00, 0x1, 0x2, 0x80000000, 0xc8}})
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000024c0)={{<r6=>0x0, 0x80, 0x4, 0x0, 0x3, 0x8, 0x9, 0x80000001, 0xff, 0x8000, 0x61a1835b, 0x8, 0xfffffffffffffff9, 0x6, 0x100000000}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000034c0)={0x100000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r7=>0x0}], 0x0, "f304c29834a001"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000044c0)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r8=>0x0}], 0x6, "9d8e228f075e65"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000054c0)={0x26d2e5dc, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r9=>0x0}], 0x5, "436ddf2e57c1f3"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000064c0)={0x0, ""/256, 0x0, <r10=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000066c0)={0xd4b, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r11=>0x0}], 0x7f, "5ddecd103853d4"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000076c0)={0x0, ""/256, 0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000078c0)={0x0, ""/256, 0x0, <r13=>0x0})
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000007ac0)={{<r14=>0x0, 0xd76, 0x3, 0x1f, 0x9, 0x40, 0x1, 0x7, 0x9, 0x4ed6e066, 0x7, 0x5, 0x0, 0x72a38a4a}})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000008ac0)={0x0, ""/256, 0x0, <r15=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000008cc0)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r16=>0x0}], 0x7f, "4f940821208b3b"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000009cc0)={0x0, ""/256, 0x0, <r17=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f000005acc0)={0xa, [{}, {}, {}, {}, {}, {r2}, {r3}, {r4}, {r5}, {r6}, {0x0, r7}, {}, {0x0, r8}, {}, {0x0, r9}, {}, {0x0, r10}, {}, {r11}, {0x0, r12}, {0x0, r13}, {r14, r15}, {0x0, r16}, {}, {0x0, r17}], 0x27, "547722d3843688"})

07:12:11 executing program 2:
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)={0x13, 0x65, 0xffff, 0xa, 0x6, '9P2000'}, 0x13)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
write$P9_RLOPEN(r0, &(0x7f0000000080)={0x18, 0xd, 0x1, {{0x0, 0x2, 0x2}, 0x1}}, 0x18)
write$P9_RFLUSH(r0, &(0x7f00000000c0)={0x7, 0x6d, 0x1}, 0x7)
write$P9_RFLUSH(r0, &(0x7f0000000100)={0x7, 0x6d, 0x2}, 0x7)
write$P9_RFSYNC(r0, &(0x7f0000000140)={0x7, 0x33, 0x2}, 0x7)
write$P9_RSYMLINK(r0, &(0x7f0000000180)={0x14, 0x11, 0x2, {0x8, 0x4, 0x5}}, 0x14)
write$P9_RXATTRWALK(r0, &(0x7f00000001c0)={0xf, 0x1f, 0x1, 0x4}, 0xf)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r1=>r0, {0x1}}, './file0\x00'})
write$P9_RXATTRCREATE(r1, &(0x7f0000000240)={0x7, 0x21, 0x2}, 0x7)
write$P9_RREADLINK(r0, &(0x7f0000000280)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)
write$P9_RFLUSH(r0, &(0x7f00000002c0)={0x7, 0x6d, 0x2}, 0x7)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000300)={{0x1, 0x1, 0x18, <r2=>r0}, './file0\x00'})
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x9)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, {<r4=>r0}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000380)={{0x1, 0x1, 0x18, r3, {r4}}, './file0\x00'})
write$P9_RVERSION(r1, &(0x7f00000003c0)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13)
r5 = fsmount(r1, 0x0, 0x1)
r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000000440)={{0x1, 0x1, 0x18, r6, @out_args}, './file0\x00'})

07:12:11 executing program 5:
write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x33, 0x2}, 0x7)
write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000080)={0x57, 0x6f, 0x1, {0x6, [{0x0, 0x1, 0x6}, {0x2, 0x0, 0x3}, {0x0, 0x0, 0x6}, {0x80, 0x0, 0x1}, {0x0, 0x0, 0x7}, {0x60, 0x4, 0x2}]}}, 0x57)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
write$P9_RXATTRWALK(r0, &(0x7f0000000140)={0xf, 0x1f, 0x2, 0x4}, 0xf)
write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8)
write$P9_RLOPEN(r0, &(0x7f00000001c0)={0x18, 0xd, 0x2, {{0x8, 0x0, 0x2}}}, 0x18)
ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000200)=""/53)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0)
r2 = getuid()
getresgid(&(0x7f0000000280), &(0x7f00000002c0)=<r3=>0x0, &(0x7f0000000300)=<r4=>0x0)
write$P9_RSTATu(r1, &(0x7f0000000340)={0x64, 0x7d, 0x1, {{0x0, 0x4e, 0x0, 0x8, {0x1, 0x4, 0x5}, 0x10080000, 0x8e, 0x40, 0x7, 0x3, ',]{', 0xd, ')$-:\\-+/-@--%', 0x3, '%\xa5 ', 0x8, '\\!%^{-^\\'}, 0x1, '{', r2, r3}}, 0x64)
write$P9_RFSYNC(r1, &(0x7f00000003c0)={0x7, 0x33, 0x4b7a}, 0x7)
keyctl$session_to_parent(0x12)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'})
write$P9_RMKNOD(r1, &(0x7f0000000440)={0x14, 0x13, 0x1, {0x20, 0x0, 0x1}}, 0x14)
r5 = syz_open_dev$evdev(&(0x7f0000000480), 0x800, 0x200)
ioctl$EVIOCGSW(r5, 0x8040451b, &(0x7f00000004c0)=""/169)
setregid(r4, 0xee01)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000580)={{0x1, 0x1, 0x18}, './file0\x00'})

07:12:12 executing program 0:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x9, 0x80800)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000040)={0x0, ""/256, 0x0, <r1=>0x0})
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000240)={{<r2=>0x0, 0x2, 0x7f, 0x0, 0x3f, 0x1, 0x3, 0x8, 0x7, 0x99, 0x6, 0x5, 0x7, 0x9, 0x8}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000001240)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r3=>0x0}], 0x40, "22b9c4afd61e01"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002240)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r4=>0x0}], 0x8, "2d90bbddabcf99"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003240)={0x0, ""/256, 0x0, <r5=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000003440)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r6=>0x0}], 0x4, "f49520b81f1c2f"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000004440)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r7=>0x0}], 0x7f, "572715c03606e1"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000005440)={<r8=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000005640)={0x0, ""/256, <r9=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000005840)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r10=>0x0}], 0xa1, "fa19d3979abf24"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000006840)={0x5512, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r11=>0x0}], 0xff, "65b46eb6fff74a"})
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000007840)={{<r12=>0x0, 0x6, 0x8001, 0x1, 0x9, 0x7f, 0x1ff, 0x7, 0x100, 0x0, 0x1, 0x2, 0xdac, 0x1ff, 0x8}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000008840)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r13=>0x0}], 0x0, "6e8b9c32a096eb"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009840)={0x0, ""/256, 0x0, <r14=>0x0})
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000009a40)={{<r15=>0x0, 0x7ff, 0x2, 0x2, 0x4, 0x5, 0xfffffffffffffff8, 0x8, 0xe42b, 0x27, 0x8, 0xfff, 0x8, 0x4}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000000aa40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r16=>0x0}], 0x4, "265f3034cad1b9"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000065e40)={0xffffffff, [{}, {0x0, r1}, {}, {}, {}, {r2}, {}, {0x0, r3}, {}, {r4}, {}, {0x0, r5}, {}, {}, {}, {0x0, r6}, {0x0, r7}, {r8}, {}, {r9}, {}, {0x0, r10}, {}, {}, {}, {0x0, r11}, {r12}, {r13, r14}, {}, {}, {r15}, {}, {}, {0x0, r16}], 0x9, "6b398caedfd2bb"})

07:12:12 executing program 4:
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000000)={{0x0, 0x7, 0x6, 0x2, 0x978, 0x0, 0x0, 0x62fc7f23, 0x0, 0x0, 0x92, 0x1, 0xba, 0x0, 0xa4}})
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000001000))
socketpair(0x29, 0x3, 0xd4e1, &(0x7f0000001040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000001080))
memfd_create(&(0x7f00000010c0)='\x00', 0x1)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000001100)='io.pressure\x00', 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000001140)={{0x1, 0x1, 0x18, <r2=>r0, {0x3}}, './file0\x00'})
write$P9_RCLUNK(r2, &(0x7f0000001180)={0x7, 0x79, 0x1}, 0x7)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000011c0)={{0x1, 0x1, 0x18, r2, {0x9}}, './file0\x00'})
pipe2$9p(&(0x7f0000001200), 0x88000)
r3 = openat$cgroup_devices(r2, &(0x7f0000001240)='devices.deny\x00', 0x2, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001280))
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000001600)="3f6302e3292e36e1f50ff72e1ca192b7", 0x10)

07:12:21 executing program 6:
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000000)='\x00', 0x0, r0)
r1 = syz_open_dev$rtc(&(0x7f0000000080), 0xffffffff, 0x200000)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000000c0)={0x0, ""/256, <r2=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000002c0)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r3=>0x0}], 0x26, "6398404f48d65f"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000012c0)={<r4=>0x0})
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000014c0)={{<r5=>0x0, 0x9, 0x7, 0x1000, 0x10000, 0xff, 0x47e4, 0x10001, 0x6, 0x6, 0xd37e00, 0x1, 0x2, 0x80000000, 0xc8}})
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000024c0)={{<r6=>0x0, 0x80, 0x4, 0x0, 0x3, 0x8, 0x9, 0x80000001, 0xff, 0x8000, 0x61a1835b, 0x8, 0xfffffffffffffff9, 0x6, 0x100000000}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000034c0)={0x100000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r7=>0x0}], 0x0, "f304c29834a001"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000044c0)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r8=>0x0}], 0x6, "9d8e228f075e65"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000054c0)={0x26d2e5dc, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r9=>0x0}], 0x5, "436ddf2e57c1f3"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000064c0)={0x0, ""/256, 0x0, <r10=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000066c0)={0xd4b, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r11=>0x0}], 0x7f, "5ddecd103853d4"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000076c0)={0x0, ""/256, 0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000078c0)={0x0, ""/256, 0x0, <r13=>0x0})
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000007ac0)={{<r14=>0x0, 0xd76, 0x3, 0x1f, 0x9, 0x40, 0x1, 0x7, 0x9, 0x4ed6e066, 0x7, 0x5, 0x0, 0x72a38a4a}})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000008ac0)={0x0, ""/256, 0x0, <r15=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000008cc0)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r16=>0x0}], 0x7f, "4f940821208b3b"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000009cc0)={0x0, ""/256, 0x0, <r17=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f000005acc0)={0xa, [{}, {}, {}, {}, {}, {r2}, {r3}, {r4}, {r5}, {r6}, {0x0, r7}, {}, {0x0, r8}, {}, {0x0, r9}, {}, {0x0, r10}, {}, {r11}, {0x0, r12}, {0x0, r13}, {r14, r15}, {0x0, r16}, {}, {0x0, r17}], 0x27, "547722d3843688"})

07:12:21 executing program 3:
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x1, 'gre0\x00', 0x2}, 0x18)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e20, @local}, {0x2, 0x4e20, @local}, {0x2, 0x4e23, @rand_addr=0x64010100}, 0x4, 0x0, 0x0, 0x0, 0x3f, &(0x7f0000000040)='sit0\x00', 0x0, 0x3, 0x6})
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
ioctl$RTC_UIE_OFF(r0, 0x7004)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'})
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r1=>r0, {0x5}}, './file0\x00'})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f00000001c0)={'tunl0\x00', 0x0, 0x80, 0x80, 0xd00a, 0x4, {{0x6, 0x4, 0x0, 0x3a, 0x18, 0x65, 0x0, 0x5, 0x2f, 0x0, @rand_addr=0x64010100, @empty, {[@end]}}}}})
ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r1, {0x7}}, './file0\x00'})
write$P9_RREAD(r2, &(0x7f0000000280)={0x40, 0x75, 0x1, {0x35, "9dcae8b907cf6af91013d1f49279d21e922f34b9f4043d7d106ef0185fbc37dbf2c971ae78e6e7379bc943ecbea2fd1a0e40d92cd6"}}, 0x40)
r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000300)={{0x1, 0x1, 0x18, <r4=>r3, {0x4}}, './file0\x00'})
socketpair(0x29, 0x800, 0x2, &(0x7f0000000340))
ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000380)={0x25, 0x20, 0x4, 0x12, 0x9, 0x8, 0x0, 0x24, 0x1})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000003c0)={{0x1, 0x1, 0x18, <r5=>r4}, './file0\x00'})
fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000400)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r6=>0x0}], 0x40, "08b4bae6edcdea"})
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000001400)={{r6, 0x1, 0x0, 0x7fff, 0x932972d, 0x8, 0x1000, 0x0, 0x3f, 0x9, 0x5, 0x3, 0x8e7, 0x7ff, 0x2}})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000002400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f0000002440)={{0x1, 0x1, 0x18, r1}, './file0\x00'})

07:12:21 executing program 4:
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000000)={{0x0, 0x7, 0x6, 0x2, 0x978, 0x0, 0x0, 0x62fc7f23, 0x0, 0x0, 0x92, 0x1, 0xba, 0x0, 0xa4}})
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000001000))
socketpair(0x29, 0x3, 0xd4e1, &(0x7f0000001040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000001080))
memfd_create(&(0x7f00000010c0)='\x00', 0x1)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000001100)='io.pressure\x00', 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000001140)={{0x1, 0x1, 0x18, <r2=>r0, {0x3}}, './file0\x00'})
write$P9_RCLUNK(r2, &(0x7f0000001180)={0x7, 0x79, 0x1}, 0x7)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000011c0)={{0x1, 0x1, 0x18, r2, {0x9}}, './file0\x00'})
pipe2$9p(&(0x7f0000001200), 0x88000)
openat$cgroup_devices(r2, &(0x7f0000001240)='devices.deny\x00', 0x2, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000001600)="3f6302e3292e36e1f50ff72e1ca192b7", 0x10)

07:12:21 executing program 5:
write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x33, 0x2}, 0x7)
write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000080)={0x57, 0x6f, 0x1, {0x6, [{0x0, 0x1, 0x6}, {0x2, 0x0, 0x3}, {0x0, 0x0, 0x6}, {0x80, 0x0, 0x1}, {0x0, 0x0, 0x7}, {0x60, 0x4, 0x2}]}}, 0x57)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
write$P9_RXATTRWALK(r0, &(0x7f0000000140)={0xf, 0x1f, 0x2, 0x4}, 0xf)
write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8)
write$P9_RLOPEN(r0, &(0x7f00000001c0)={0x18, 0xd, 0x2, {{0x8, 0x0, 0x2}}}, 0x18)
ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000200)=""/53)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0)
r2 = getuid()
getresgid(&(0x7f0000000280), &(0x7f00000002c0)=<r3=>0x0, &(0x7f0000000300)=<r4=>0x0)
write$P9_RSTATu(r1, &(0x7f0000000340)={0x64, 0x7d, 0x1, {{0x0, 0x4e, 0x0, 0x8, {0x1, 0x4, 0x5}, 0x10080000, 0x8e, 0x40, 0x7, 0x3, ',]{', 0xd, ')$-:\\-+/-@--%', 0x3, '%\xa5 ', 0x8, '\\!%^{-^\\'}, 0x1, '{', r2, r3}}, 0x64)
write$P9_RFSYNC(r1, &(0x7f00000003c0)={0x7, 0x33, 0x4b7a}, 0x7)
keyctl$session_to_parent(0x12)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'})
write$P9_RMKNOD(r1, &(0x7f0000000440)={0x14, 0x13, 0x1, {0x20, 0x0, 0x1}}, 0x14)
r5 = syz_open_dev$evdev(&(0x7f0000000480), 0x800, 0x200)
ioctl$EVIOCGSW(r5, 0x8040451b, &(0x7f00000004c0)=""/169)
setregid(r4, 0xee01)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000580)={{0x1, 0x1, 0x18}, './file0\x00'})

07:12:21 executing program 2:
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)={0x13, 0x65, 0xffff, 0xa, 0x6, '9P2000'}, 0x13)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
write$P9_RLOPEN(r0, &(0x7f0000000080)={0x18, 0xd, 0x1, {{0x0, 0x2, 0x2}, 0x1}}, 0x18)
write$P9_RFLUSH(r0, &(0x7f00000000c0)={0x7, 0x6d, 0x1}, 0x7)
write$P9_RFLUSH(r0, &(0x7f0000000100)={0x7, 0x6d, 0x2}, 0x7)
write$P9_RFSYNC(r0, &(0x7f0000000140)={0x7, 0x33, 0x2}, 0x7)
write$P9_RSYMLINK(r0, &(0x7f0000000180)={0x14, 0x11, 0x2, {0x8, 0x4, 0x5}}, 0x14)
write$P9_RXATTRWALK(r0, &(0x7f00000001c0)={0xf, 0x1f, 0x1, 0x4}, 0xf)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r1=>r0, {0x1}}, './file0\x00'})
write$P9_RXATTRCREATE(r1, &(0x7f0000000240)={0x7, 0x21, 0x2}, 0x7)
write$P9_RREADLINK(r0, &(0x7f0000000280)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)
write$P9_RFLUSH(r0, &(0x7f00000002c0)={0x7, 0x6d, 0x2}, 0x7)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000300)={{0x1, 0x1, 0x18, <r2=>r0}, './file0\x00'})
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x9)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, {<r4=>r0}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000380)={{0x1, 0x1, 0x18, r3, {r4}}, './file0\x00'})
write$P9_RVERSION(r1, &(0x7f00000003c0)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13)
r5 = fsmount(r1, 0x0, 0x1)
r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000000440)={{0x1, 0x1, 0x18, r6, @out_args}, './file0\x00'})

07:12:21 executing program 1:
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x9)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000))
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
write$P9_RLOPEN(r1, &(0x7f0000000080)={0x18, 0xd, 0x2, {{0x10, 0x0, 0x1}, 0xf08}}, 0x18)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff, {0x9}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {0x8}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r4=>r0, {0x6}}, './file0\x00'})
r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x12400, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r6=>r4, {<r7=>0xffffffffffffffff}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r8=>r7, {0x200000}}, './file0/file0\x00'})
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000240)={{0x0, 0x7, 0x85c, 0x8, 0x0, 0x81, 0xfe, 0xd4b4, 0x7, 0x8, 0xff, 0x8001, 0x0, 0x3, 0x100000001}})
r9 = fsmount(r2, 0x1, 0x4)
ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000001240)={0x7, 0x4d, 0x1}, 0x7)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000001280)={{0x1, 0x1, 0x18, r3, {0x10}}, './file0\x00'})
r10 = syz_open_dev$rtc(&(0x7f00000012c0), 0x60ff, 0x575100)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r8, 0xc018937a, &(0x7f0000001300)={{0x1, 0x1, 0x18, r10, {0x2}}, './file1\x00'})
r11 = syz_open_dev$evdev(&(0x7f0000001340), 0x4, 0x400)
ioctl$EVIOCREVOKE(r11, 0x40044591, &(0x7f0000001380)=0x8)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000001400)={{0x1, 0x1, 0x18, r0, {r1}}, './file0/file0\x00'})

07:12:21 executing program 0:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x9, 0x80800)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000040)={0x0, ""/256, 0x0, <r1=>0x0})
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000240)={{<r2=>0x0, 0x2, 0x7f, 0x0, 0x3f, 0x1, 0x3, 0x8, 0x7, 0x99, 0x6, 0x5, 0x7, 0x9, 0x8}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000001240)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r3=>0x0}], 0x40, "22b9c4afd61e01"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002240)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r4=>0x0}], 0x8, "2d90bbddabcf99"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003240)={0x0, ""/256, 0x0, <r5=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000003440)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r6=>0x0}], 0x4, "f49520b81f1c2f"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000004440)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r7=>0x0}], 0x7f, "572715c03606e1"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000005440)={<r8=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000005640)={0x0, ""/256, <r9=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000005840)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r10=>0x0}], 0xa1, "fa19d3979abf24"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000006840)={0x5512, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r11=>0x0}], 0xff, "65b46eb6fff74a"})
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000007840)={{<r12=>0x0, 0x6, 0x8001, 0x1, 0x9, 0x7f, 0x1ff, 0x7, 0x100, 0x0, 0x1, 0x2, 0xdac, 0x1ff, 0x8}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000008840)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r13=>0x0}], 0x0, "6e8b9c32a096eb"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009840)={0x0, ""/256, 0x0, <r14=>0x0})
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000009a40)={{<r15=>0x0, 0x7ff, 0x2, 0x2, 0x4, 0x5, 0xfffffffffffffff8, 0x8, 0xe42b, 0x27, 0x8, 0xfff, 0x8, 0x4}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000000aa40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r16=>0x0}], 0x4, "265f3034cad1b9"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000065e40)={0xffffffff, [{}, {0x0, r1}, {}, {}, {}, {r2}, {}, {0x0, r3}, {}, {r4}, {}, {0x0, r5}, {}, {}, {}, {0x0, r6}, {0x0, r7}, {r8}, {}, {r9}, {}, {0x0, r10}, {}, {}, {}, {0x0, r11}, {r12}, {r13, r14}, {}, {}, {r15}, {}, {}, {0x0, r16}], 0x9, "6b398caedfd2bb"})

07:12:21 executing program 7:
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000040)='++{\xf4v\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff)
ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f00000000c0))
write$P9_RLOCK(r0, &(0x7f0000000100)={0x8, 0x35, 0x2, 0x1}, 0x8)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000140)='++{\xf4v\x00', &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r1=>r0, {0x69d}}, './file0\x00'})
write$P9_RCLUNK(r0, &(0x7f0000000200)={0x7, 0x79, 0x1}, 0x7)
write$P9_RREADLINK(r1, &(0x7f0000000240)={0x16, 0x17, 0x1, {0xd, './file0/file0'}}, 0x16)
r2 = fsmount(r1, 0x0, 0x70)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0x7}}, './file0/file0/file0\x00'})
write$9p(r0, &(0x7f00000002c0)="55a086551c2800119185cc494ad570a3fb37e7b0fc5ebaad11ff54373ed7aea7b587df90a62eafb3e2f18b974dd650074f334fcf264c69dd74", 0x39)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000300)={{0x1, 0x1, 0x18, <r3=>r2}, './file0/file0\x00'})
write$P9_RSYMLINK(r3, &(0x7f0000000340)={0x14, 0x11, 0x2, {0x80, 0x0, 0x8}}, 0x14)
fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f0000000380)='*\x00', &(0x7f00000003c0)='./file0\x00', r0)
r4 = socket$inet(0x2, 0x2, 0xc1f)
setsockopt$inet_group_source_req(r4, 0x0, 0x2b, &(0x7f0000000400)={0x6, {{0x2, 0x4e23, @empty}}, {{0x2, 0x4e24, @rand_addr=0x64010101}}}, 0x108)
pipe2$9p(&(0x7f0000000540)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80000)
write$P9_RWALK(r5, &(0x7f0000000580)={0x64, 0x6f, 0x1, {0x7, [{0x4, 0x3}, {0x1, 0x2, 0x5}, {0x80, 0x1, 0x1}, {0x40, 0x0, 0x8}, {0x2, 0x3, 0x4}, {0x1, 0x3, 0x8}, {0x10, 0x2, 0x3}]}}, 0x64)
write$P9_RUNLINKAT(r3, &(0x7f0000000600)={0x7, 0x4d, 0x1}, 0x7)
fspick(r1, &(0x7f0000000640)='./file0/file0\x00', 0x0)

07:12:21 executing program 7:
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000040)='++{\xf4v\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff)
ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f00000000c0))
write$P9_RLOCK(r0, &(0x7f0000000100)={0x8, 0x35, 0x2, 0x1}, 0x8)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000140)='++{\xf4v\x00', &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r1=>r0, {0x69d}}, './file0\x00'})
write$P9_RCLUNK(r0, &(0x7f0000000200)={0x7, 0x79, 0x1}, 0x7)
write$P9_RREADLINK(r1, &(0x7f0000000240)={0x16, 0x17, 0x1, {0xd, './file0/file0'}}, 0x16)
r2 = fsmount(r1, 0x0, 0x70)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0x7}}, './file0/file0/file0\x00'})
write$9p(r0, &(0x7f00000002c0)="55a086551c2800119185cc494ad570a3fb37e7b0fc5ebaad11ff54373ed7aea7b587df90a62eafb3e2f18b974dd650074f334fcf264c69dd74", 0x39)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000300)={{0x1, 0x1, 0x18, <r3=>r2}, './file0/file0\x00'})
write$P9_RSYMLINK(r3, &(0x7f0000000340)={0x14, 0x11, 0x2, {0x80, 0x0, 0x8}}, 0x14)
fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f0000000380)='*\x00', &(0x7f00000003c0)='./file0\x00', r0)
r4 = socket$inet(0x2, 0x2, 0xc1f)
setsockopt$inet_group_source_req(r4, 0x0, 0x2b, &(0x7f0000000400)={0x6, {{0x2, 0x4e23, @empty}}, {{0x2, 0x4e24, @rand_addr=0x64010101}}}, 0x108)
pipe2$9p(&(0x7f0000000540)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80000)
write$P9_RWALK(r5, &(0x7f0000000580)={0x64, 0x6f, 0x1, {0x7, [{0x4, 0x3}, {0x1, 0x2, 0x5}, {0x80, 0x1, 0x1}, {0x40, 0x0, 0x8}, {0x2, 0x3, 0x4}, {0x1, 0x3, 0x8}, {0x10, 0x2, 0x3}]}}, 0x64)
fspick(r1, &(0x7f0000000640)='./file0/file0\x00', 0x0)

07:12:21 executing program 1:
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x9)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000))
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
write$P9_RLOPEN(r1, &(0x7f0000000080)={0x18, 0xd, 0x2, {{0x10, 0x0, 0x1}, 0xf08}}, 0x18)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff, {0x9}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {0x8}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r4=>r0, {0x6}}, './file0\x00'})
r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x12400, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r6=>r4, {<r7=>0xffffffffffffffff}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r8=>r7, {0x200000}}, './file0/file0\x00'})
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000240)={{0x0, 0x7, 0x85c, 0x8, 0x0, 0x81, 0xfe, 0xd4b4, 0x7, 0x8, 0xff, 0x8001, 0x0, 0x3, 0x100000001}})
r9 = fsmount(r2, 0x1, 0x4)
ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000001240)={0x7, 0x4d, 0x1}, 0x7)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000001280)={{0x1, 0x1, 0x18, r3, {0x10}}, './file0\x00'})
r10 = syz_open_dev$rtc(&(0x7f00000012c0), 0x60ff, 0x575100)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r8, 0xc018937a, &(0x7f0000001300)={{0x1, 0x1, 0x18, r10, {0x2}}, './file1\x00'})
r11 = syz_open_dev$evdev(&(0x7f0000001340), 0x4, 0x400)
ioctl$EVIOCREVOKE(r11, 0x40044591, &(0x7f0000001380)=0x8)

07:12:21 executing program 4:
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000000)={{0x0, 0x7, 0x6, 0x2, 0x978, 0x0, 0x0, 0x62fc7f23, 0x0, 0x0, 0x92, 0x1, 0xba, 0x0, 0xa4}})
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000001000))
socketpair(0x29, 0x3, 0xd4e1, &(0x7f0000001040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000001080))
memfd_create(&(0x7f00000010c0)='\x00', 0x1)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000001100)='io.pressure\x00', 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000001140)={{0x1, 0x1, 0x18, <r2=>r0, {0x3}}, './file0\x00'})
write$P9_RCLUNK(r2, &(0x7f0000001180)={0x7, 0x79, 0x1}, 0x7)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000011c0)={{0x1, 0x1, 0x18, r2, {0x9}}, './file0\x00'})
pipe2$9p(&(0x7f0000001200), 0x88000)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000001600)="3f6302e3292e36e1f50ff72e1ca192b7", 0x10)

07:12:21 executing program 5:
write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x33, 0x2}, 0x7)
write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000080)={0x57, 0x6f, 0x1, {0x6, [{0x0, 0x1, 0x6}, {0x2, 0x0, 0x3}, {0x0, 0x0, 0x6}, {0x80, 0x0, 0x1}, {0x0, 0x0, 0x7}, {0x60, 0x4, 0x2}]}}, 0x57)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
write$P9_RXATTRWALK(r0, &(0x7f0000000140)={0xf, 0x1f, 0x2, 0x4}, 0xf)
write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8)
write$P9_RLOPEN(r0, &(0x7f00000001c0)={0x18, 0xd, 0x2, {{0x8, 0x0, 0x2}}}, 0x18)
ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000200)=""/53)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0)
r2 = getuid()
getresgid(&(0x7f0000000280), &(0x7f00000002c0)=<r3=>0x0, &(0x7f0000000300)=<r4=>0x0)
write$P9_RSTATu(r1, &(0x7f0000000340)={0x64, 0x7d, 0x1, {{0x0, 0x4e, 0x0, 0x8, {0x1, 0x4, 0x5}, 0x10080000, 0x8e, 0x40, 0x7, 0x3, ',]{', 0xd, ')$-:\\-+/-@--%', 0x3, '%\xa5 ', 0x8, '\\!%^{-^\\'}, 0x1, '{', r2, r3}}, 0x64)
write$P9_RFSYNC(r1, &(0x7f00000003c0)={0x7, 0x33, 0x4b7a}, 0x7)
keyctl$session_to_parent(0x12)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'})
write$P9_RMKNOD(r1, &(0x7f0000000440)={0x14, 0x13, 0x1, {0x20, 0x0, 0x1}}, 0x14)
r5 = syz_open_dev$evdev(&(0x7f0000000480), 0x800, 0x200)
ioctl$EVIOCGSW(r5, 0x8040451b, &(0x7f00000004c0)=""/169)
setregid(r4, 0xee01)

07:12:21 executing program 7:
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000040)='++{\xf4v\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff)
ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f00000000c0))
write$P9_RLOCK(r0, &(0x7f0000000100)={0x8, 0x35, 0x2, 0x1}, 0x8)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000140)='++{\xf4v\x00', &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r1=>r0, {0x69d}}, './file0\x00'})
write$P9_RCLUNK(r0, &(0x7f0000000200)={0x7, 0x79, 0x1}, 0x7)
write$P9_RREADLINK(r1, &(0x7f0000000240)={0x16, 0x17, 0x1, {0xd, './file0/file0'}}, 0x16)
r2 = fsmount(r1, 0x0, 0x70)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0x7}}, './file0/file0/file0\x00'})
write$9p(r0, &(0x7f00000002c0)="55a086551c2800119185cc494ad570a3fb37e7b0fc5ebaad11ff54373ed7aea7b587df90a62eafb3e2f18b974dd650074f334fcf264c69dd74", 0x39)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000300)={{0x1, 0x1, 0x18, <r3=>r2}, './file0/file0\x00'})
write$P9_RSYMLINK(r3, &(0x7f0000000340)={0x14, 0x11, 0x2, {0x80, 0x0, 0x8}}, 0x14)
fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f0000000380)='*\x00', &(0x7f00000003c0)='./file0\x00', r0)
r4 = socket$inet(0x2, 0x2, 0xc1f)
setsockopt$inet_group_source_req(r4, 0x0, 0x2b, &(0x7f0000000400)={0x6, {{0x2, 0x4e23, @empty}}, {{0x2, 0x4e24, @rand_addr=0x64010101}}}, 0x108)
pipe2$9p(&(0x7f0000000540), 0x80000)
fspick(r1, &(0x7f0000000640)='./file0/file0\x00', 0x0)

07:12:21 executing program 2:
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)={0x13, 0x65, 0xffff, 0xa, 0x6, '9P2000'}, 0x13)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
write$P9_RLOPEN(r0, &(0x7f0000000080)={0x18, 0xd, 0x1, {{0x0, 0x2, 0x2}, 0x1}}, 0x18)
write$P9_RFLUSH(r0, &(0x7f00000000c0)={0x7, 0x6d, 0x1}, 0x7)
write$P9_RFLUSH(r0, &(0x7f0000000100)={0x7, 0x6d, 0x2}, 0x7)
write$P9_RFSYNC(r0, &(0x7f0000000140)={0x7, 0x33, 0x2}, 0x7)
write$P9_RSYMLINK(r0, &(0x7f0000000180)={0x14, 0x11, 0x2, {0x8, 0x4, 0x5}}, 0x14)
write$P9_RXATTRWALK(r0, &(0x7f00000001c0)={0xf, 0x1f, 0x1, 0x4}, 0xf)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r1=>r0, {0x1}}, './file0\x00'})
write$P9_RXATTRCREATE(r1, &(0x7f0000000240)={0x7, 0x21, 0x2}, 0x7)
write$P9_RREADLINK(r0, &(0x7f0000000280)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)
write$P9_RFLUSH(r0, &(0x7f00000002c0)={0x7, 0x6d, 0x2}, 0x7)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000300)={{0x1, 0x1, 0x18, <r2=>r0}, './file0\x00'})
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x9)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, {<r4=>r0}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000380)={{0x1, 0x1, 0x18, r3, {r4}}, './file0\x00'})
write$P9_RVERSION(r1, &(0x7f00000003c0)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13)
fsmount(r1, 0x0, 0x1)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)

07:12:21 executing program 0:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x9, 0x80800)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000040))
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000240)={{0x0, 0x2, 0x7f, 0x0, 0x3f, 0x1, 0x3, 0x8, 0x7, 0x99, 0x6, 0x5, 0x7, 0x9, 0x8}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000001240)={0x3, [], 0x40, "22b9c4afd61e01"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002240)={0x8, [], 0x8, "2d90bbddabcf99"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003240))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000003440)={0x6, [], 0x4, "f49520b81f1c2f"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000004440)={0x8, [], 0x7f, "572715c03606e1"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000005440))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000005640))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000005840)={0x4, [], 0xa1, "fa19d3979abf24"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000006840)={0x5512, [], 0xff, "65b46eb6fff74a"})
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000007840)={{0x0, 0x6, 0x8001, 0x1, 0x9, 0x7f, 0x1ff, 0x7, 0x100, 0x0, 0x1, 0x2, 0xdac, 0x1ff, 0x8}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000008840)={0x2, [], 0x0, "6e8b9c32a096eb"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009840))
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000009a40)={{0x0, 0x7ff, 0x2, 0x2, 0x4, 0x5, 0xfffffffffffffff8, 0x8, 0xe42b, 0x27, 0x8, 0xfff, 0x8, 0x4}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000000aa40)={0x1, [], 0x4, "265f3034cad1b9"})

07:12:29 executing program 4:
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000000)={{0x0, 0x7, 0x6, 0x2, 0x978, 0x0, 0x0, 0x62fc7f23, 0x0, 0x0, 0x92, 0x1, 0xba, 0x0, 0xa4}})
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000001000))
socketpair(0x29, 0x3, 0xd4e1, &(0x7f0000001040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000001080))
memfd_create(&(0x7f00000010c0)='\x00', 0x1)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000001100)='io.pressure\x00', 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000001140)={{0x1, 0x1, 0x18, <r2=>r0, {0x3}}, './file0\x00'})
write$P9_RCLUNK(r2, &(0x7f0000001180)={0x7, 0x79, 0x1}, 0x7)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000011c0)={{0x1, 0x1, 0x18, r2, {0x9}}, './file0\x00'})
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000001600)="3f6302e3292e36e1f50ff72e1ca192b7", 0x10)

07:12:29 executing program 3:
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x1, 'gre0\x00', 0x2}, 0x18)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e20, @local}, {0x2, 0x4e20, @local}, {0x2, 0x4e23, @rand_addr=0x64010100}, 0x4, 0x0, 0x0, 0x0, 0x3f, &(0x7f0000000040)='sit0\x00', 0x0, 0x3, 0x6})
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
ioctl$RTC_UIE_OFF(r0, 0x7004)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'})
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r1=>r0, {0x5}}, './file0\x00'})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f00000001c0)={'tunl0\x00', 0x0, 0x80, 0x80, 0xd00a, 0x4, {{0x6, 0x4, 0x0, 0x3a, 0x18, 0x65, 0x0, 0x5, 0x2f, 0x0, @rand_addr=0x64010100, @empty, {[@end]}}}}})
ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r1, {0x7}}, './file0\x00'})
write$P9_RREAD(r2, &(0x7f0000000280)={0x40, 0x75, 0x1, {0x35, "9dcae8b907cf6af91013d1f49279d21e922f34b9f4043d7d106ef0185fbc37dbf2c971ae78e6e7379bc943ecbea2fd1a0e40d92cd6"}}, 0x40)
r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000300)={{0x1, 0x1, 0x18, <r4=>r3, {0x4}}, './file0\x00'})
socketpair(0x29, 0x800, 0x2, &(0x7f0000000340))
ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000380)={0x25, 0x20, 0x4, 0x12, 0x9, 0x8, 0x0, 0x24, 0x1})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000003c0)={{0x1, 0x1, 0x18, <r5=>r4}, './file0\x00'})
fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000400)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r6=>0x0}], 0x40, "08b4bae6edcdea"})
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000001400)={{r6, 0x1, 0x0, 0x7fff, 0x932972d, 0x8, 0x1000, 0x0, 0x3f, 0x9, 0x5, 0x3, 0x8e7, 0x7ff, 0x2}})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000002400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'})

07:12:29 executing program 7:
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000040)='++{\xf4v\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff)
ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f00000000c0))
write$P9_RLOCK(r0, &(0x7f0000000100)={0x8, 0x35, 0x2, 0x1}, 0x8)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000140)='++{\xf4v\x00', &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r1=>r0, {0x69d}}, './file0\x00'})
write$P9_RCLUNK(r0, &(0x7f0000000200)={0x7, 0x79, 0x1}, 0x7)
write$P9_RREADLINK(r1, &(0x7f0000000240)={0x16, 0x17, 0x1, {0xd, './file0/file0'}}, 0x16)
r2 = fsmount(r1, 0x0, 0x70)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0x7}}, './file0/file0/file0\x00'})
write$9p(r0, &(0x7f00000002c0)="55a086551c2800119185cc494ad570a3fb37e7b0fc5ebaad11ff54373ed7aea7b587df90a62eafb3e2f18b974dd650074f334fcf264c69dd74", 0x39)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000300)={{0x1, 0x1, 0x18, <r3=>r2}, './file0/file0\x00'})
write$P9_RSYMLINK(r3, &(0x7f0000000340)={0x14, 0x11, 0x2, {0x80, 0x0, 0x8}}, 0x14)
fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f0000000380)='*\x00', &(0x7f00000003c0)='./file0\x00', r0)
r4 = socket$inet(0x2, 0x2, 0xc1f)
setsockopt$inet_group_source_req(r4, 0x0, 0x2b, &(0x7f0000000400)={0x6, {{0x2, 0x4e23, @empty}}, {{0x2, 0x4e24, @rand_addr=0x64010101}}}, 0x108)
fspick(r1, &(0x7f0000000640)='./file0/file0\x00', 0x0)

07:12:29 executing program 5:
write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x33, 0x2}, 0x7)
write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000080)={0x57, 0x6f, 0x1, {0x6, [{0x0, 0x1, 0x6}, {0x2, 0x0, 0x3}, {0x0, 0x0, 0x6}, {0x80, 0x0, 0x1}, {0x0, 0x0, 0x7}, {0x60, 0x4, 0x2}]}}, 0x57)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
write$P9_RXATTRWALK(r0, &(0x7f0000000140)={0xf, 0x1f, 0x2, 0x4}, 0xf)
write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8)
write$P9_RLOPEN(r0, &(0x7f00000001c0)={0x18, 0xd, 0x2, {{0x8, 0x0, 0x2}}}, 0x18)
ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000200)=""/53)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0)
r2 = getuid()
getresgid(&(0x7f0000000280), &(0x7f00000002c0)=<r3=>0x0, &(0x7f0000000300)=<r4=>0x0)
write$P9_RSTATu(r1, &(0x7f0000000340)={0x64, 0x7d, 0x1, {{0x0, 0x4e, 0x0, 0x8, {0x1, 0x4, 0x5}, 0x10080000, 0x8e, 0x40, 0x7, 0x3, ',]{', 0xd, ')$-:\\-+/-@--%', 0x3, '%\xa5 ', 0x8, '\\!%^{-^\\'}, 0x1, '{', r2, r3}}, 0x64)
write$P9_RFSYNC(r1, &(0x7f00000003c0)={0x7, 0x33, 0x4b7a}, 0x7)
keyctl$session_to_parent(0x12)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'})
write$P9_RMKNOD(r1, &(0x7f0000000440)={0x14, 0x13, 0x1, {0x20, 0x0, 0x1}}, 0x14)
syz_open_dev$evdev(&(0x7f0000000480), 0x800, 0x200)
setregid(r4, 0xee01)

07:12:29 executing program 6:
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000000)='\x00', 0x0, r0)
syz_open_dev$rtc(&(0x7f0000000080), 0xffffffff, 0x200000)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000000c0))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000002c0)={0x3, [], 0x26, "6398404f48d65f"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000012c0))
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000014c0)={{0x0, 0x9, 0x7, 0x1000, 0x10000, 0xff, 0x47e4, 0x10001, 0x6, 0x6, 0xd37e00, 0x1, 0x2, 0x80000000, 0xc8}})
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000024c0)={{0x0, 0x80, 0x4, 0x0, 0x3, 0x8, 0x9, 0x80000001, 0xff, 0x8000, 0x61a1835b, 0x8, 0xfffffffffffffff9, 0x6, 0x100000000}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000034c0)={0x100000000, [], 0x0, "f304c29834a001"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000044c0)={0x9, [], 0x6, "9d8e228f075e65"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000054c0)={0x26d2e5dc, [], 0x5, "436ddf2e57c1f3"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000064c0))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000066c0)={0xd4b, [], 0x7f, "5ddecd103853d4"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000076c0))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000078c0))
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000007ac0)={{0x0, 0xd76, 0x3, 0x1f, 0x9, 0x40, 0x1, 0x7, 0x9, 0x4ed6e066, 0x7, 0x5, 0x0, 0x72a38a4a}})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000008ac0))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000008cc0)={0x5, [], 0x7f, "4f940821208b3b"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000009cc0))

07:12:29 executing program 2:
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)={0x13, 0x65, 0xffff, 0xa, 0x6, '9P2000'}, 0x13)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
write$P9_RLOPEN(r0, &(0x7f0000000080)={0x18, 0xd, 0x1, {{0x0, 0x2, 0x2}, 0x1}}, 0x18)
write$P9_RFLUSH(r0, &(0x7f00000000c0)={0x7, 0x6d, 0x1}, 0x7)
write$P9_RFLUSH(r0, &(0x7f0000000100)={0x7, 0x6d, 0x2}, 0x7)
write$P9_RFSYNC(r0, &(0x7f0000000140)={0x7, 0x33, 0x2}, 0x7)
write$P9_RSYMLINK(r0, &(0x7f0000000180)={0x14, 0x11, 0x2, {0x8, 0x4, 0x5}}, 0x14)
write$P9_RXATTRWALK(r0, &(0x7f00000001c0)={0xf, 0x1f, 0x1, 0x4}, 0xf)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r1=>r0, {0x1}}, './file0\x00'})
write$P9_RXATTRCREATE(r1, &(0x7f0000000240)={0x7, 0x21, 0x2}, 0x7)
write$P9_RREADLINK(r0, &(0x7f0000000280)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)
write$P9_RFLUSH(r0, &(0x7f00000002c0)={0x7, 0x6d, 0x2}, 0x7)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000300)={{0x1, 0x1, 0x18, <r2=>r0}, './file0\x00'})
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x9)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, {<r4=>r0}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000380)={{0x1, 0x1, 0x18, r3, {r4}}, './file0\x00'})
write$P9_RVERSION(r1, &(0x7f00000003c0)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)

07:12:29 executing program 1:
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x9)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000))
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
write$P9_RLOPEN(r1, &(0x7f0000000080)={0x18, 0xd, 0x2, {{0x10, 0x0, 0x1}, 0xf08}}, 0x18)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff, {0x9}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {0x8}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r4=>r0, {0x6}}, './file0\x00'})
r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x12400, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r6=>r4, {<r7=>0xffffffffffffffff}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r8=>r7, {0x200000}}, './file0/file0\x00'})
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000240)={{0x0, 0x7, 0x85c, 0x8, 0x0, 0x81, 0xfe, 0xd4b4, 0x7, 0x8, 0xff, 0x8001, 0x0, 0x3, 0x100000001}})
r9 = fsmount(r2, 0x1, 0x4)
ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000001240)={0x7, 0x4d, 0x1}, 0x7)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000001280)={{0x1, 0x1, 0x18, r3, {0x10}}, './file0\x00'})
r10 = syz_open_dev$rtc(&(0x7f00000012c0), 0x60ff, 0x575100)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r8, 0xc018937a, &(0x7f0000001300)={{0x1, 0x1, 0x18, r10, {0x2}}, './file1\x00'})
syz_open_dev$evdev(&(0x7f0000001340), 0x4, 0x400)

07:12:29 executing program 0:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x9, 0x80800)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000040))
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000240)={{0x0, 0x2, 0x7f, 0x0, 0x3f, 0x1, 0x3, 0x8, 0x7, 0x99, 0x6, 0x5, 0x7, 0x9, 0x8}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000001240)={0x3, [], 0x40, "22b9c4afd61e01"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002240)={0x8, [], 0x8, "2d90bbddabcf99"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003240))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000003440)={0x6, [], 0x4, "f49520b81f1c2f"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000004440)={0x8, [], 0x7f, "572715c03606e1"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000005440))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000005640))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000005840)={0x4, [], 0xa1, "fa19d3979abf24"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000006840)={0x5512, [], 0xff, "65b46eb6fff74a"})
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000007840)={{0x0, 0x6, 0x8001, 0x1, 0x9, 0x7f, 0x1ff, 0x7, 0x100, 0x0, 0x1, 0x2, 0xdac, 0x1ff, 0x8}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000008840)={0x2, [], 0x0, "6e8b9c32a096eb"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009840))
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000009a40)={{0x0, 0x7ff, 0x2, 0x2, 0x4, 0x5, 0xfffffffffffffff8, 0x8, 0xe42b, 0x27, 0x8, 0xfff, 0x8, 0x4}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000000aa40)={0x1, [], 0x4, "265f3034cad1b9"})

07:12:29 executing program 5:
write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x33, 0x2}, 0x7)
write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000080)={0x57, 0x6f, 0x1, {0x6, [{0x0, 0x1, 0x6}, {0x2, 0x0, 0x3}, {0x0, 0x0, 0x6}, {0x80, 0x0, 0x1}, {0x0, 0x0, 0x7}, {0x60, 0x4, 0x2}]}}, 0x57)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
write$P9_RXATTRWALK(r0, &(0x7f0000000140)={0xf, 0x1f, 0x2, 0x4}, 0xf)
write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8)
write$P9_RLOPEN(r0, &(0x7f00000001c0)={0x18, 0xd, 0x2, {{0x8, 0x0, 0x2}}}, 0x18)
ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000200)=""/53)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0)
r2 = getuid()
getresgid(&(0x7f0000000280), &(0x7f00000002c0)=<r3=>0x0, &(0x7f0000000300)=<r4=>0x0)
write$P9_RSTATu(r1, &(0x7f0000000340)={0x64, 0x7d, 0x1, {{0x0, 0x4e, 0x0, 0x8, {0x1, 0x4, 0x5}, 0x10080000, 0x8e, 0x40, 0x7, 0x3, ',]{', 0xd, ')$-:\\-+/-@--%', 0x3, '%\xa5 ', 0x8, '\\!%^{-^\\'}, 0x1, '{', r2, r3}}, 0x64)
write$P9_RFSYNC(r1, &(0x7f00000003c0)={0x7, 0x33, 0x4b7a}, 0x7)
keyctl$session_to_parent(0x12)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'})
write$P9_RMKNOD(r1, &(0x7f0000000440)={0x14, 0x13, 0x1, {0x20, 0x0, 0x1}}, 0x14)
setregid(r4, 0xee01)

07:12:29 executing program 6:
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000000)='\x00', 0x0, r0)
syz_open_dev$rtc(&(0x7f0000000080), 0xffffffff, 0x200000)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000000c0))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000002c0)={0x3, [], 0x26, "6398404f48d65f"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000012c0))
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000014c0)={{0x0, 0x9, 0x7, 0x1000, 0x10000, 0xff, 0x47e4, 0x10001, 0x6, 0x6, 0xd37e00, 0x1, 0x2, 0x80000000, 0xc8}})
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000024c0)={{0x0, 0x80, 0x4, 0x0, 0x3, 0x8, 0x9, 0x80000001, 0xff, 0x8000, 0x61a1835b, 0x8, 0xfffffffffffffff9, 0x6, 0x100000000}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000034c0)={0x100000000, [], 0x0, "f304c29834a001"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000044c0)={0x9, [], 0x6, "9d8e228f075e65"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000054c0)={0x26d2e5dc, [], 0x5, "436ddf2e57c1f3"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000064c0))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000066c0)={0xd4b, [], 0x7f, "5ddecd103853d4"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000076c0))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000078c0))
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000007ac0)={{0x0, 0xd76, 0x3, 0x1f, 0x9, 0x40, 0x1, 0x7, 0x9, 0x4ed6e066, 0x7, 0x5, 0x0, 0x72a38a4a}})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000008ac0))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000008cc0)={0x5, [], 0x7f, "4f940821208b3b"})

07:12:39 executing program 1:
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x9)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000))
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
write$P9_RLOPEN(r1, &(0x7f0000000080)={0x18, 0xd, 0x2, {{0x10, 0x0, 0x1}, 0xf08}}, 0x18)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff, {0x9}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {0x8}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r4=>r0, {0x6}}, './file0\x00'})
r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x12400, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r6=>r4, {<r7=>0xffffffffffffffff}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r8=>r7, {0x200000}}, './file0/file0\x00'})
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000240)={{0x0, 0x7, 0x85c, 0x8, 0x0, 0x81, 0xfe, 0xd4b4, 0x7, 0x8, 0xff, 0x8001, 0x0, 0x3, 0x100000001}})
r9 = fsmount(r2, 0x1, 0x4)
ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000001240)={0x7, 0x4d, 0x1}, 0x7)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000001280)={{0x1, 0x1, 0x18, r3, {0x10}}, './file0\x00'})
r10 = syz_open_dev$rtc(&(0x7f00000012c0), 0x60ff, 0x575100)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r8, 0xc018937a, &(0x7f0000001300)={{0x1, 0x1, 0x18, r10, {0x2}}, './file1\x00'})

07:12:39 executing program 0:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x9, 0x80800)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000040))
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000240)={{0x0, 0x2, 0x7f, 0x0, 0x3f, 0x1, 0x3, 0x8, 0x7, 0x99, 0x6, 0x5, 0x7, 0x9, 0x8}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000001240)={0x3, [], 0x40, "22b9c4afd61e01"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002240)={0x8, [], 0x8, "2d90bbddabcf99"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003240))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000003440)={0x6, [], 0x4, "f49520b81f1c2f"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000004440)={0x8, [], 0x7f, "572715c03606e1"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000005440))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000005640))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000005840)={0x4, [], 0xa1, "fa19d3979abf24"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000006840)={0x5512, [], 0xff, "65b46eb6fff74a"})
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000007840)={{0x0, 0x6, 0x8001, 0x1, 0x9, 0x7f, 0x1ff, 0x7, 0x100, 0x0, 0x1, 0x2, 0xdac, 0x1ff, 0x8}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000008840)={0x2, [], 0x0, "6e8b9c32a096eb"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009840))
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000009a40)={{0x0, 0x7ff, 0x2, 0x2, 0x4, 0x5, 0xfffffffffffffff8, 0x8, 0xe42b, 0x27, 0x8, 0xfff, 0x8, 0x4}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000000aa40)={0x1, [], 0x4, "265f3034cad1b9"})

07:12:39 executing program 4:
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000000)={{0x0, 0x7, 0x6, 0x2, 0x978, 0x0, 0x0, 0x62fc7f23, 0x0, 0x0, 0x92, 0x1, 0xba, 0x0, 0xa4}})
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000001000))
socketpair(0x29, 0x3, 0xd4e1, &(0x7f0000001040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000001080))
memfd_create(&(0x7f00000010c0)='\x00', 0x1)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000001100)='io.pressure\x00', 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000001140)={{0x1, 0x1, 0x18, <r2=>r0, {0x3}}, './file0\x00'})
write$P9_RCLUNK(r2, &(0x7f0000001180)={0x7, 0x79, 0x1}, 0x7)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000001600)="3f6302e3292e36e1f50ff72e1ca192b7", 0x10)

07:12:39 executing program 6:
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000000)='\x00', 0x0, r0)
syz_open_dev$rtc(&(0x7f0000000080), 0xffffffff, 0x200000)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000000c0))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000002c0)={0x3, [], 0x26, "6398404f48d65f"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000012c0))
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000014c0)={{0x0, 0x9, 0x7, 0x1000, 0x10000, 0xff, 0x47e4, 0x10001, 0x6, 0x6, 0xd37e00, 0x1, 0x2, 0x80000000, 0xc8}})
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000024c0)={{0x0, 0x80, 0x4, 0x0, 0x3, 0x8, 0x9, 0x80000001, 0xff, 0x8000, 0x61a1835b, 0x8, 0xfffffffffffffff9, 0x6, 0x100000000}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000034c0)={0x100000000, [], 0x0, "f304c29834a001"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000044c0)={0x9, [], 0x6, "9d8e228f075e65"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000054c0)={0x26d2e5dc, [], 0x5, "436ddf2e57c1f3"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000064c0))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000066c0)={0xd4b, [], 0x7f, "5ddecd103853d4"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000076c0))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000078c0))
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000007ac0)={{0x0, 0xd76, 0x3, 0x1f, 0x9, 0x40, 0x1, 0x7, 0x9, 0x4ed6e066, 0x7, 0x5, 0x0, 0x72a38a4a}})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000008ac0))

07:12:39 executing program 2:
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)={0x13, 0x65, 0xffff, 0xa, 0x6, '9P2000'}, 0x13)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
write$P9_RLOPEN(r0, &(0x7f0000000080)={0x18, 0xd, 0x1, {{0x0, 0x2, 0x2}, 0x1}}, 0x18)
write$P9_RFLUSH(r0, &(0x7f00000000c0)={0x7, 0x6d, 0x1}, 0x7)
write$P9_RFLUSH(r0, &(0x7f0000000100)={0x7, 0x6d, 0x2}, 0x7)
write$P9_RFSYNC(r0, &(0x7f0000000140)={0x7, 0x33, 0x2}, 0x7)
write$P9_RSYMLINK(r0, &(0x7f0000000180)={0x14, 0x11, 0x2, {0x8, 0x4, 0x5}}, 0x14)
write$P9_RXATTRWALK(r0, &(0x7f00000001c0)={0xf, 0x1f, 0x1, 0x4}, 0xf)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r1=>r0, {0x1}}, './file0\x00'})
write$P9_RXATTRCREATE(r1, &(0x7f0000000240)={0x7, 0x21, 0x2}, 0x7)
write$P9_RREADLINK(r0, &(0x7f0000000280)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)
write$P9_RFLUSH(r0, &(0x7f00000002c0)={0x7, 0x6d, 0x2}, 0x7)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000300)={{0x1, 0x1, 0x18, <r2=>r0}, './file0\x00'})
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x9)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, {<r4=>r0}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000380)={{0x1, 0x1, 0x18, r3, {r4}}, './file0\x00'})
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)

07:12:39 executing program 5:
write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x33, 0x2}, 0x7)
write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000080)={0x57, 0x6f, 0x1, {0x6, [{0x0, 0x1, 0x6}, {0x2, 0x0, 0x3}, {0x0, 0x0, 0x6}, {0x80, 0x0, 0x1}, {0x0, 0x0, 0x7}, {0x60, 0x4, 0x2}]}}, 0x57)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
write$P9_RXATTRWALK(r0, &(0x7f0000000140)={0xf, 0x1f, 0x2, 0x4}, 0xf)
write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8)
write$P9_RLOPEN(r0, &(0x7f00000001c0)={0x18, 0xd, 0x2, {{0x8, 0x0, 0x2}}}, 0x18)
ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000200)=""/53)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0)
r2 = getuid()
getresgid(&(0x7f0000000280), &(0x7f00000002c0)=<r3=>0x0, &(0x7f0000000300)=<r4=>0x0)
write$P9_RSTATu(r1, &(0x7f0000000340)={0x64, 0x7d, 0x1, {{0x0, 0x4e, 0x0, 0x8, {0x1, 0x4, 0x5}, 0x10080000, 0x8e, 0x40, 0x7, 0x3, ',]{', 0xd, ')$-:\\-+/-@--%', 0x3, '%\xa5 ', 0x8, '\\!%^{-^\\'}, 0x1, '{', r2, r3}}, 0x64)
write$P9_RFSYNC(r1, &(0x7f00000003c0)={0x7, 0x33, 0x4b7a}, 0x7)
keyctl$session_to_parent(0x12)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'})
setregid(r4, 0xee01)

07:12:39 executing program 7:
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000040)='++{\xf4v\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff)
ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f00000000c0))
write$P9_RLOCK(r0, &(0x7f0000000100)={0x8, 0x35, 0x2, 0x1}, 0x8)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000140)='++{\xf4v\x00', &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r1=>r0, {0x69d}}, './file0\x00'})
write$P9_RCLUNK(r0, &(0x7f0000000200)={0x7, 0x79, 0x1}, 0x7)
write$P9_RREADLINK(r1, &(0x7f0000000240)={0x16, 0x17, 0x1, {0xd, './file0/file0'}}, 0x16)
r2 = fsmount(r1, 0x0, 0x70)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0x7}}, './file0/file0/file0\x00'})
write$9p(r0, &(0x7f00000002c0)="55a086551c2800119185cc494ad570a3fb37e7b0fc5ebaad11ff54373ed7aea7b587df90a62eafb3e2f18b974dd650074f334fcf264c69dd74", 0x39)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000300)={{0x1, 0x1, 0x18, <r3=>r2}, './file0/file0\x00'})
write$P9_RSYMLINK(r3, &(0x7f0000000340)={0x14, 0x11, 0x2, {0x80, 0x0, 0x8}}, 0x14)
fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f0000000380)='*\x00', &(0x7f00000003c0)='./file0\x00', r0)
socket$inet(0x2, 0x2, 0xc1f)
fspick(r1, &(0x7f0000000640)='./file0/file0\x00', 0x0)

07:12:39 executing program 3:
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x1, 'gre0\x00', 0x2}, 0x18)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e20, @local}, {0x2, 0x4e20, @local}, {0x2, 0x4e23, @rand_addr=0x64010100}, 0x4, 0x0, 0x0, 0x0, 0x3f, &(0x7f0000000040)='sit0\x00', 0x0, 0x3, 0x6})
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
ioctl$RTC_UIE_OFF(r0, 0x7004)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'})
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r1=>r0, {0x5}}, './file0\x00'})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f00000001c0)={'tunl0\x00', 0x0, 0x80, 0x80, 0xd00a, 0x4, {{0x6, 0x4, 0x0, 0x3a, 0x18, 0x65, 0x0, 0x5, 0x2f, 0x0, @rand_addr=0x64010100, @empty, {[@end]}}}}})
ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r1, {0x7}}, './file0\x00'})
write$P9_RREAD(r2, &(0x7f0000000280)={0x40, 0x75, 0x1, {0x35, "9dcae8b907cf6af91013d1f49279d21e922f34b9f4043d7d106ef0185fbc37dbf2c971ae78e6e7379bc943ecbea2fd1a0e40d92cd6"}}, 0x40)
r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000300)={{0x1, 0x1, 0x18, <r4=>r3, {0x4}}, './file0\x00'})
socketpair(0x29, 0x800, 0x2, &(0x7f0000000340))
ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000380)={0x25, 0x20, 0x4, 0x12, 0x9, 0x8, 0x0, 0x24, 0x1})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000003c0)={{0x1, 0x1, 0x18, <r5=>r4}, './file0\x00'})
fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000400)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r6=>0x0}], 0x40, "08b4bae6edcdea"})
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000001400)={{r6, 0x1, 0x0, 0x7fff, 0x932972d, 0x8, 0x1000, 0x0, 0x3f, 0x9, 0x5, 0x3, 0x8e7, 0x7ff, 0x2}})

07:12:39 executing program 1:
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x9)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000))
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
write$P9_RLOPEN(r1, &(0x7f0000000080)={0x18, 0xd, 0x2, {{0x10, 0x0, 0x1}, 0xf08}}, 0x18)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff, {0x9}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {0x8}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r4=>r0, {0x6}}, './file0\x00'})
r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x12400, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r6=>r4, {<r7=>0xffffffffffffffff}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, r7, {0x200000}}, './file0/file0\x00'})
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000240)={{0x0, 0x7, 0x85c, 0x8, 0x0, 0x81, 0xfe, 0xd4b4, 0x7, 0x8, 0xff, 0x8001, 0x0, 0x3, 0x100000001}})
r8 = fsmount(r2, 0x1, 0x4)
ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000001240)={0x7, 0x4d, 0x1}, 0x7)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000001280)={{0x1, 0x1, 0x18, r3, {0x10}}, './file0\x00'})
syz_open_dev$rtc(&(0x7f00000012c0), 0x60ff, 0x575100)

07:12:39 executing program 2:
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)={0x13, 0x65, 0xffff, 0xa, 0x6, '9P2000'}, 0x13)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
write$P9_RLOPEN(r0, &(0x7f0000000080)={0x18, 0xd, 0x1, {{0x0, 0x2, 0x2}, 0x1}}, 0x18)
write$P9_RFLUSH(r0, &(0x7f00000000c0)={0x7, 0x6d, 0x1}, 0x7)
write$P9_RFLUSH(r0, &(0x7f0000000100)={0x7, 0x6d, 0x2}, 0x7)
write$P9_RFSYNC(r0, &(0x7f0000000140)={0x7, 0x33, 0x2}, 0x7)
write$P9_RSYMLINK(r0, &(0x7f0000000180)={0x14, 0x11, 0x2, {0x8, 0x4, 0x5}}, 0x14)
write$P9_RXATTRWALK(r0, &(0x7f00000001c0)={0xf, 0x1f, 0x1, 0x4}, 0xf)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r1=>r0, {0x1}}, './file0\x00'})
write$P9_RXATTRCREATE(r1, &(0x7f0000000240)={0x7, 0x21, 0x2}, 0x7)
write$P9_RREADLINK(r0, &(0x7f0000000280)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)
write$P9_RFLUSH(r0, &(0x7f00000002c0)={0x7, 0x6d, 0x2}, 0x7)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0}, './file0\x00'})
syz_open_dev$char_usb(0xc, 0xb4, 0x9)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'})
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)

07:12:39 executing program 7:
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000040)='++{\xf4v\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff)
ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f00000000c0))
write$P9_RLOCK(r0, &(0x7f0000000100)={0x8, 0x35, 0x2, 0x1}, 0x8)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000140)='++{\xf4v\x00', &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r1=>r0, {0x69d}}, './file0\x00'})
write$P9_RCLUNK(r0, &(0x7f0000000200)={0x7, 0x79, 0x1}, 0x7)
write$P9_RREADLINK(r1, &(0x7f0000000240)={0x16, 0x17, 0x1, {0xd, './file0/file0'}}, 0x16)
r2 = fsmount(r1, 0x0, 0x70)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0x7}}, './file0/file0/file0\x00'})
write$9p(r0, &(0x7f00000002c0)="55a086551c2800119185cc494ad570a3fb37e7b0fc5ebaad11ff54373ed7aea7b587df90a62eafb3e2f18b974dd650074f334fcf264c69dd74", 0x39)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000300)={{0x1, 0x1, 0x18, <r3=>r2}, './file0/file0\x00'})
write$P9_RSYMLINK(r3, &(0x7f0000000340)={0x14, 0x11, 0x2, {0x80, 0x0, 0x8}}, 0x14)
fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f0000000380)='*\x00', &(0x7f00000003c0)='./file0\x00', r0)
fspick(r1, &(0x7f0000000640)='./file0/file0\x00', 0x0)

07:12:39 executing program 6:
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000000)='\x00', 0x0, r0)
syz_open_dev$rtc(&(0x7f0000000080), 0xffffffff, 0x200000)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000000c0))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000002c0)={0x3, [], 0x26, "6398404f48d65f"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000012c0))
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000014c0)={{0x0, 0x9, 0x7, 0x1000, 0x10000, 0xff, 0x47e4, 0x10001, 0x6, 0x6, 0xd37e00, 0x1, 0x2, 0x80000000, 0xc8}})
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000024c0)={{0x0, 0x80, 0x4, 0x0, 0x3, 0x8, 0x9, 0x80000001, 0xff, 0x8000, 0x61a1835b, 0x8, 0xfffffffffffffff9, 0x6, 0x100000000}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000034c0)={0x100000000, [], 0x0, "f304c29834a001"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000044c0)={0x9, [], 0x6, "9d8e228f075e65"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000054c0)={0x26d2e5dc, [], 0x5, "436ddf2e57c1f3"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000064c0))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000066c0)={0xd4b, [], 0x7f, "5ddecd103853d4"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000076c0))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000078c0))
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000007ac0)={{0x0, 0xd76, 0x3, 0x1f, 0x9, 0x40, 0x1, 0x7, 0x9, 0x4ed6e066, 0x7, 0x5, 0x0, 0x72a38a4a}})

07:12:39 executing program 5:
write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x33, 0x2}, 0x7)
write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000080)={0x57, 0x6f, 0x1, {0x6, [{0x0, 0x1, 0x6}, {0x2, 0x0, 0x3}, {0x0, 0x0, 0x6}, {0x80, 0x0, 0x1}, {0x0, 0x0, 0x7}, {0x60, 0x4, 0x2}]}}, 0x57)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
write$P9_RXATTRWALK(r0, &(0x7f0000000140)={0xf, 0x1f, 0x2, 0x4}, 0xf)
write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8)
write$P9_RLOPEN(r0, &(0x7f00000001c0)={0x18, 0xd, 0x2, {{0x8, 0x0, 0x2}}}, 0x18)
ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000200)=""/53)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0)
r2 = getuid()
getresgid(&(0x7f0000000280), &(0x7f00000002c0)=<r3=>0x0, &(0x7f0000000300)=<r4=>0x0)
write$P9_RSTATu(r1, &(0x7f0000000340)={0x64, 0x7d, 0x1, {{0x0, 0x4e, 0x0, 0x8, {0x1, 0x4, 0x5}, 0x10080000, 0x8e, 0x40, 0x7, 0x3, ',]{', 0xd, ')$-:\\-+/-@--%', 0x3, '%\xa5 ', 0x8, '\\!%^{-^\\'}, 0x1, '{', r2, r3}}, 0x64)
write$P9_RFSYNC(r1, &(0x7f00000003c0)={0x7, 0x33, 0x4b7a}, 0x7)
keyctl$session_to_parent(0x12)
setregid(r4, 0xee01)

07:12:39 executing program 0:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x9, 0x80800)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000040))
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000240)={{0x0, 0x2, 0x7f, 0x0, 0x3f, 0x1, 0x3, 0x8, 0x7, 0x99, 0x6, 0x5, 0x7, 0x9, 0x8}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000001240)={0x3, [], 0x40, "22b9c4afd61e01"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002240)={0x8, [], 0x8, "2d90bbddabcf99"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003240))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000003440)={0x6, [], 0x4, "f49520b81f1c2f"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000004440)={0x8, [], 0x7f, "572715c03606e1"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000005440))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000005640))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000005840)={0x4, [], 0xa1, "fa19d3979abf24"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000006840)={0x5512, [], 0xff, "65b46eb6fff74a"})
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000007840)={{0x0, 0x6, 0x8001, 0x1, 0x9, 0x7f, 0x1ff, 0x7, 0x100, 0x0, 0x1, 0x2, 0xdac, 0x1ff, 0x8}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000008840)={0x2, [], 0x0, "6e8b9c32a096eb"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009840))
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000009a40)={{0x0, 0x7ff, 0x2, 0x2, 0x4, 0x5, 0xfffffffffffffff8, 0x8, 0xe42b, 0x27, 0x8, 0xfff, 0x8, 0x4}})

07:12:39 executing program 3:
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x1, 'gre0\x00', 0x2}, 0x18)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e20, @local}, {0x2, 0x4e20, @local}, {0x2, 0x4e23, @rand_addr=0x64010100}, 0x4, 0x0, 0x0, 0x0, 0x3f, &(0x7f0000000040)='sit0\x00', 0x0, 0x3, 0x6})
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
ioctl$RTC_UIE_OFF(r0, 0x7004)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'})
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r1=>r0, {0x5}}, './file0\x00'})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f00000001c0)={'tunl0\x00', 0x0, 0x80, 0x80, 0xd00a, 0x4, {{0x6, 0x4, 0x0, 0x3a, 0x18, 0x65, 0x0, 0x5, 0x2f, 0x0, @rand_addr=0x64010100, @empty, {[@end]}}}}})
ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r1, {0x7}}, './file0\x00'})
write$P9_RREAD(r2, &(0x7f0000000280)={0x40, 0x75, 0x1, {0x35, "9dcae8b907cf6af91013d1f49279d21e922f34b9f4043d7d106ef0185fbc37dbf2c971ae78e6e7379bc943ecbea2fd1a0e40d92cd6"}}, 0x40)
r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000300)={{0x1, 0x1, 0x18, <r4=>r3, {0x4}}, './file0\x00'})
socketpair(0x29, 0x800, 0x2, &(0x7f0000000340))
ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000380)={0x25, 0x20, 0x4, 0x12, 0x9, 0x8, 0x0, 0x24, 0x1})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000003c0)={{0x1, 0x1, 0x18, <r5=>r4}, './file0\x00'})
fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000400)={0x2, [], 0x40, "08b4bae6edcdea"})

07:12:39 executing program 4:
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000000)={{0x0, 0x7, 0x6, 0x2, 0x978, 0x0, 0x0, 0x62fc7f23, 0x0, 0x0, 0x92, 0x1, 0xba, 0x0, 0xa4}})
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000001000))
socketpair(0x29, 0x3, 0xd4e1, &(0x7f0000001040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000001080))
memfd_create(&(0x7f00000010c0)='\x00', 0x1)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000001100)='io.pressure\x00', 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000001140)={{0x1, 0x1, 0x18, <r2=>r0, {0x3}}, './file0\x00'})
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000001600)="3f6302e3292e36e1f50ff72e1ca192b7", 0x10)

07:12:47 executing program 5:
write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x33, 0x2}, 0x7)
write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000080)={0x57, 0x6f, 0x1, {0x6, [{0x0, 0x1, 0x6}, {0x2, 0x0, 0x3}, {0x0, 0x0, 0x6}, {0x80, 0x0, 0x1}, {0x0, 0x0, 0x7}, {0x60, 0x4, 0x2}]}}, 0x57)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
write$P9_RXATTRWALK(r0, &(0x7f0000000140)={0xf, 0x1f, 0x2, 0x4}, 0xf)
write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8)
write$P9_RLOPEN(r0, &(0x7f00000001c0)={0x18, 0xd, 0x2, {{0x8, 0x0, 0x2}}}, 0x18)
ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000200)=""/53)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0)
r2 = getuid()
getresgid(&(0x7f0000000280), &(0x7f00000002c0)=<r3=>0x0, &(0x7f0000000300)=<r4=>0x0)
write$P9_RSTATu(r1, &(0x7f0000000340)={0x64, 0x7d, 0x1, {{0x0, 0x4e, 0x0, 0x8, {0x1, 0x4, 0x5}, 0x10080000, 0x8e, 0x40, 0x7, 0x3, ',]{', 0xd, ')$-:\\-+/-@--%', 0x3, '%\xa5 ', 0x8, '\\!%^{-^\\'}, 0x1, '{', r2, r3}}, 0x64)
write$P9_RFSYNC(r1, &(0x7f00000003c0)={0x7, 0x33, 0x4b7a}, 0x7)
setregid(r4, 0xee01)

07:12:47 executing program 1:
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x9)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000))
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
write$P9_RLOPEN(r1, &(0x7f0000000080)={0x18, 0xd, 0x2, {{0x10, 0x0, 0x1}, 0xf08}}, 0x18)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff, {0x9}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {0x8}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r4=>r0, {0x6}}, './file0\x00'})
r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x12400, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r4, {<r6=>0xffffffffffffffff}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, r6, {0x200000}}, './file0/file0\x00'})
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000240)={{0x0, 0x7, 0x85c, 0x8, 0x0, 0x81, 0xfe, 0xd4b4, 0x7, 0x8, 0xff, 0x8001, 0x0, 0x3, 0x100000001}})
r7 = fsmount(r2, 0x1, 0x4)
ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000001240)={0x7, 0x4d, 0x1}, 0x7)
syz_open_dev$rtc(&(0x7f00000012c0), 0x60ff, 0x575100)

07:12:47 executing program 4:
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000000)={{0x0, 0x7, 0x6, 0x2, 0x978, 0x0, 0x0, 0x62fc7f23, 0x0, 0x0, 0x92, 0x1, 0xba, 0x0, 0xa4}})
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000001000))
socketpair(0x29, 0x3, 0xd4e1, &(0x7f0000001040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000001080))
memfd_create(&(0x7f00000010c0)='\x00', 0x1)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000001100)='io.pressure\x00', 0x2, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000001600)="3f6302e3292e36e1f50ff72e1ca192b7", 0x10)

07:12:47 executing program 3:
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x1, 'gre0\x00', 0x2}, 0x18)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e20, @local}, {0x2, 0x4e20, @local}, {0x2, 0x4e23, @rand_addr=0x64010100}, 0x4, 0x0, 0x0, 0x0, 0x3f, &(0x7f0000000040)='sit0\x00', 0x0, 0x3, 0x6})
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
ioctl$RTC_UIE_OFF(r0, 0x7004)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'})
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r1=>r0, {0x5}}, './file0\x00'})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f00000001c0)={'tunl0\x00', 0x0, 0x80, 0x80, 0xd00a, 0x4, {{0x6, 0x4, 0x0, 0x3a, 0x18, 0x65, 0x0, 0x5, 0x2f, 0x0, @rand_addr=0x64010100, @empty, {[@end]}}}}})
ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r1, {0x7}}, './file0\x00'})
write$P9_RREAD(r2, &(0x7f0000000280)={0x40, 0x75, 0x1, {0x35, "9dcae8b907cf6af91013d1f49279d21e922f34b9f4043d7d106ef0185fbc37dbf2c971ae78e6e7379bc943ecbea2fd1a0e40d92cd6"}}, 0x40)
r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000300)={{0x1, 0x1, 0x18, <r4=>r3, {0x4}}, './file0\x00'})
socketpair(0x29, 0x800, 0x2, &(0x7f0000000340))
ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000380)={0x25, 0x20, 0x4, 0x12, 0x9, 0x8, 0x0, 0x24, 0x1})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000400)={0x2, [], 0x40, "08b4bae6edcdea"})

07:12:47 executing program 7:
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000040)='++{\xf4v\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff)
ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f00000000c0))
write$P9_RLOCK(r0, &(0x7f0000000100)={0x8, 0x35, 0x2, 0x1}, 0x8)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000140)='++{\xf4v\x00', &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r1=>r0, {0x69d}}, './file0\x00'})
write$P9_RCLUNK(r0, &(0x7f0000000200)={0x7, 0x79, 0x1}, 0x7)
write$P9_RREADLINK(r1, &(0x7f0000000240)={0x16, 0x17, 0x1, {0xd, './file0/file0'}}, 0x16)
r2 = fsmount(r1, 0x0, 0x70)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0x7}}, './file0/file0/file0\x00'})
write$9p(r0, &(0x7f00000002c0)="55a086551c2800119185cc494ad570a3fb37e7b0fc5ebaad11ff54373ed7aea7b587df90a62eafb3e2f18b974dd650074f334fcf264c69dd74", 0x39)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000300)={{0x1, 0x1, 0x18, <r3=>r2}, './file0/file0\x00'})
write$P9_RSYMLINK(r3, &(0x7f0000000340)={0x14, 0x11, 0x2, {0x80, 0x0, 0x8}}, 0x14)
fspick(r1, &(0x7f0000000640)='./file0/file0\x00', 0x0)

07:12:47 executing program 6:
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000000)='\x00', 0x0, r0)
syz_open_dev$rtc(&(0x7f0000000080), 0xffffffff, 0x200000)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000000c0))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000002c0)={0x3, [], 0x26, "6398404f48d65f"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000012c0))
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000014c0)={{0x0, 0x9, 0x7, 0x1000, 0x10000, 0xff, 0x47e4, 0x10001, 0x6, 0x6, 0xd37e00, 0x1, 0x2, 0x80000000, 0xc8}})
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000024c0)={{0x0, 0x80, 0x4, 0x0, 0x3, 0x8, 0x9, 0x80000001, 0xff, 0x8000, 0x61a1835b, 0x8, 0xfffffffffffffff9, 0x6, 0x100000000}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000034c0)={0x100000000, [], 0x0, "f304c29834a001"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000044c0)={0x9, [], 0x6, "9d8e228f075e65"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000054c0)={0x26d2e5dc, [], 0x5, "436ddf2e57c1f3"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000064c0))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000066c0)={0xd4b, [], 0x7f, "5ddecd103853d4"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000076c0))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000078c0))

07:12:47 executing program 0:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x9, 0x80800)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000040))
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000240)={{0x0, 0x2, 0x7f, 0x0, 0x3f, 0x1, 0x3, 0x8, 0x7, 0x99, 0x6, 0x5, 0x7, 0x9, 0x8}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000001240)={0x3, [], 0x40, "22b9c4afd61e01"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002240)={0x8, [], 0x8, "2d90bbddabcf99"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003240))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000003440)={0x6, [], 0x4, "f49520b81f1c2f"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000004440)={0x8, [], 0x7f, "572715c03606e1"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000005440))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000005640))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000005840)={0x4, [], 0xa1, "fa19d3979abf24"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000006840)={0x5512, [], 0xff, "65b46eb6fff74a"})
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000007840)={{0x0, 0x6, 0x8001, 0x1, 0x9, 0x7f, 0x1ff, 0x7, 0x100, 0x0, 0x1, 0x2, 0xdac, 0x1ff, 0x8}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000008840)={0x2, [], 0x0, "6e8b9c32a096eb"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009840))
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000009a40)={{0x0, 0x7ff, 0x2, 0x2, 0x4, 0x5, 0xfffffffffffffff8, 0x8, 0xe42b, 0x27, 0x8, 0xfff, 0x8, 0x4}})

07:12:47 executing program 2:
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)={0x13, 0x65, 0xffff, 0xa, 0x6, '9P2000'}, 0x13)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
write$P9_RLOPEN(r0, &(0x7f0000000080)={0x18, 0xd, 0x1, {{0x0, 0x2, 0x2}, 0x1}}, 0x18)
write$P9_RFLUSH(r0, &(0x7f00000000c0)={0x7, 0x6d, 0x1}, 0x7)
write$P9_RFLUSH(r0, &(0x7f0000000100)={0x7, 0x6d, 0x2}, 0x7)
write$P9_RFSYNC(r0, &(0x7f0000000140)={0x7, 0x33, 0x2}, 0x7)
write$P9_RSYMLINK(r0, &(0x7f0000000180)={0x14, 0x11, 0x2, {0x8, 0x4, 0x5}}, 0x14)
write$P9_RXATTRWALK(r0, &(0x7f00000001c0)={0xf, 0x1f, 0x1, 0x4}, 0xf)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r1=>r0, {0x1}}, './file0\x00'})
write$P9_RXATTRCREATE(r1, &(0x7f0000000240)={0x7, 0x21, 0x2}, 0x7)
write$P9_RREADLINK(r0, &(0x7f0000000280)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)
write$P9_RFLUSH(r0, &(0x7f00000002c0)={0x7, 0x6d, 0x2}, 0x7)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0}, './file0\x00'})
syz_open_dev$char_usb(0xc, 0xb4, 0x9)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)

07:12:47 executing program 7:
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000040)='++{\xf4v\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff)
ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f00000000c0))
write$P9_RLOCK(r0, &(0x7f0000000100)={0x8, 0x35, 0x2, 0x1}, 0x8)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000140)='++{\xf4v\x00', &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r1=>r0, {0x69d}}, './file0\x00'})
write$P9_RCLUNK(r0, &(0x7f0000000200)={0x7, 0x79, 0x1}, 0x7)
write$P9_RREADLINK(r1, &(0x7f0000000240)={0x16, 0x17, 0x1, {0xd, './file0/file0'}}, 0x16)
r2 = fsmount(r1, 0x0, 0x70)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0x7}}, './file0/file0/file0\x00'})
write$9p(r0, &(0x7f00000002c0)="55a086551c2800119185cc494ad570a3fb37e7b0fc5ebaad11ff54373ed7aea7b587df90a62eafb3e2f18b974dd650074f334fcf264c69dd74", 0x39)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2}, './file0/file0\x00'})
fspick(r1, &(0x7f0000000640)='./file0/file0\x00', 0x0)

07:12:47 executing program 2:
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)={0x13, 0x65, 0xffff, 0xa, 0x6, '9P2000'}, 0x13)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
write$P9_RLOPEN(r0, &(0x7f0000000080)={0x18, 0xd, 0x1, {{0x0, 0x2, 0x2}, 0x1}}, 0x18)
write$P9_RFLUSH(r0, &(0x7f00000000c0)={0x7, 0x6d, 0x1}, 0x7)
write$P9_RFLUSH(r0, &(0x7f0000000100)={0x7, 0x6d, 0x2}, 0x7)
write$P9_RFSYNC(r0, &(0x7f0000000140)={0x7, 0x33, 0x2}, 0x7)
write$P9_RSYMLINK(r0, &(0x7f0000000180)={0x14, 0x11, 0x2, {0x8, 0x4, 0x5}}, 0x14)
write$P9_RXATTRWALK(r0, &(0x7f00000001c0)={0xf, 0x1f, 0x1, 0x4}, 0xf)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r1=>r0, {0x1}}, './file0\x00'})
write$P9_RXATTRCREATE(r1, &(0x7f0000000240)={0x7, 0x21, 0x2}, 0x7)
write$P9_RREADLINK(r0, &(0x7f0000000280)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)
write$P9_RFLUSH(r0, &(0x7f00000002c0)={0x7, 0x6d, 0x2}, 0x7)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0}, './file0\x00'})
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)

07:12:47 executing program 6:
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000000)='\x00', 0x0, r0)
syz_open_dev$rtc(&(0x7f0000000080), 0xffffffff, 0x200000)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000000c0))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000002c0)={0x3, [], 0x26, "6398404f48d65f"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000012c0))
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000014c0)={{0x0, 0x9, 0x7, 0x1000, 0x10000, 0xff, 0x47e4, 0x10001, 0x6, 0x6, 0xd37e00, 0x1, 0x2, 0x80000000, 0xc8}})
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000024c0)={{0x0, 0x80, 0x4, 0x0, 0x3, 0x8, 0x9, 0x80000001, 0xff, 0x8000, 0x61a1835b, 0x8, 0xfffffffffffffff9, 0x6, 0x100000000}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000034c0)={0x100000000, [], 0x0, "f304c29834a001"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000044c0)={0x9, [], 0x6, "9d8e228f075e65"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000054c0)={0x26d2e5dc, [], 0x5, "436ddf2e57c1f3"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000064c0))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000066c0)={0xd4b, [], 0x7f, "5ddecd103853d4"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000076c0))

07:12:47 executing program 5:
write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x33, 0x2}, 0x7)
write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000080)={0x57, 0x6f, 0x1, {0x6, [{0x0, 0x1, 0x6}, {0x2, 0x0, 0x3}, {0x0, 0x0, 0x6}, {0x80, 0x0, 0x1}, {0x0, 0x0, 0x7}, {0x60, 0x4, 0x2}]}}, 0x57)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
write$P9_RXATTRWALK(r0, &(0x7f0000000140)={0xf, 0x1f, 0x2, 0x4}, 0xf)
write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8)
write$P9_RLOPEN(r0, &(0x7f00000001c0)={0x18, 0xd, 0x2, {{0x8, 0x0, 0x2}}}, 0x18)
ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000200)=""/53)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0)
r2 = getuid()
getresgid(&(0x7f0000000280), &(0x7f00000002c0)=<r3=>0x0, &(0x7f0000000300)=<r4=>0x0)
write$P9_RSTATu(r1, &(0x7f0000000340)={0x64, 0x7d, 0x1, {{0x0, 0x4e, 0x0, 0x8, {0x1, 0x4, 0x5}, 0x10080000, 0x8e, 0x40, 0x7, 0x3, ',]{', 0xd, ')$-:\\-+/-@--%', 0x3, '%\xa5 ', 0x8, '\\!%^{-^\\'}, 0x1, '{', r2, r3}}, 0x64)
setregid(r4, 0xee01)

07:12:47 executing program 0:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x9, 0x80800)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000040))
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000240)={{0x0, 0x2, 0x7f, 0x0, 0x3f, 0x1, 0x3, 0x8, 0x7, 0x99, 0x6, 0x5, 0x7, 0x9, 0x8}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000001240)={0x3, [], 0x40, "22b9c4afd61e01"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002240)={0x8, [], 0x8, "2d90bbddabcf99"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003240))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000003440)={0x6, [], 0x4, "f49520b81f1c2f"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000004440)={0x8, [], 0x7f, "572715c03606e1"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000005440))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000005640))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000005840)={0x4, [], 0xa1, "fa19d3979abf24"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000006840)={0x5512, [], 0xff, "65b46eb6fff74a"})
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000007840)={{0x0, 0x6, 0x8001, 0x1, 0x9, 0x7f, 0x1ff, 0x7, 0x100, 0x0, 0x1, 0x2, 0xdac, 0x1ff, 0x8}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000008840)={0x2, [], 0x0, "6e8b9c32a096eb"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009840))
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000009a40)={{0x0, 0x7ff, 0x2, 0x2, 0x4, 0x5, 0xfffffffffffffff8, 0x8, 0xe42b, 0x27, 0x8, 0xfff, 0x8, 0x4}})

07:12:47 executing program 1:
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x9)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000))
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
write$P9_RLOPEN(r1, &(0x7f0000000080)={0x18, 0xd, 0x2, {{0x10, 0x0, 0x1}, 0xf08}}, 0x18)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff, {0x9}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {0x8}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r4=>r0, {0x6}}, './file0\x00'})
r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x12400, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r4, {<r6=>0xffffffffffffffff}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, r6, {0x200000}}, './file0/file0\x00'})
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000240)={{0x0, 0x7, 0x85c, 0x8, 0x0, 0x81, 0xfe, 0xd4b4, 0x7, 0x8, 0xff, 0x8001, 0x0, 0x3, 0x100000001}})
r7 = fsmount(r2, 0x1, 0x4)
ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82)
syz_open_dev$rtc(&(0x7f00000012c0), 0x60ff, 0x575100)

07:12:47 executing program 3:
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x1, 'gre0\x00', 0x2}, 0x18)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e20, @local}, {0x2, 0x4e20, @local}, {0x2, 0x4e23, @rand_addr=0x64010100}, 0x4, 0x0, 0x0, 0x0, 0x3f, &(0x7f0000000040)='sit0\x00', 0x0, 0x3, 0x6})
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
ioctl$RTC_UIE_OFF(r0, 0x7004)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'})
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r1=>r0, {0x5}}, './file0\x00'})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f00000001c0)={'tunl0\x00', 0x0, 0x80, 0x80, 0xd00a, 0x4, {{0x6, 0x4, 0x0, 0x3a, 0x18, 0x65, 0x0, 0x5, 0x2f, 0x0, @rand_addr=0x64010100, @empty, {[@end]}}}}})
ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r1, {0x7}}, './file0\x00'})
write$P9_RREAD(r2, &(0x7f0000000280)={0x40, 0x75, 0x1, {0x35, "9dcae8b907cf6af91013d1f49279d21e922f34b9f4043d7d106ef0185fbc37dbf2c971ae78e6e7379bc943ecbea2fd1a0e40d92cd6"}}, 0x40)
r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'})
socketpair(0x29, 0x800, 0x2, &(0x7f0000000340))
ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000380)={0x25, 0x20, 0x4, 0x12, 0x9, 0x8, 0x0, 0x24, 0x1})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000400)={0x2, [], 0x40, "08b4bae6edcdea"})

07:12:56 executing program 1:
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x9)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000))
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
write$P9_RLOPEN(r1, &(0x7f0000000080)={0x18, 0xd, 0x2, {{0x10, 0x0, 0x1}, 0xf08}}, 0x18)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff, {0x9}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r0, {0x8}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r4=>r0, {0x6}}, './file0\x00'})
r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x12400, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r4, {<r6=>0xffffffffffffffff}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, r6, {0x200000}}, './file0/file0\x00'})
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000240)={{0x0, 0x7, 0x85c, 0x8, 0x0, 0x81, 0xfe, 0xd4b4, 0x7, 0x8, 0xff, 0x8001, 0x0, 0x3, 0x100000001}})
fsmount(r2, 0x1, 0x4)
syz_open_dev$rtc(&(0x7f00000012c0), 0x60ff, 0x575100)

07:12:56 executing program 3:
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x1, 'gre0\x00', 0x2}, 0x18)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e20, @local}, {0x2, 0x4e20, @local}, {0x2, 0x4e23, @rand_addr=0x64010100}, 0x4, 0x0, 0x0, 0x0, 0x3f, &(0x7f0000000040)='sit0\x00', 0x0, 0x3, 0x6})
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
ioctl$RTC_UIE_OFF(r0, 0x7004)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'})
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r1=>r0, {0x5}}, './file0\x00'})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f00000001c0)={'tunl0\x00', 0x0, 0x80, 0x80, 0xd00a, 0x4, {{0x6, 0x4, 0x0, 0x3a, 0x18, 0x65, 0x0, 0x5, 0x2f, 0x0, @rand_addr=0x64010100, @empty, {[@end]}}}}})
ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r1, {0x7}}, './file0\x00'})
write$P9_RREAD(r2, &(0x7f0000000280)={0x40, 0x75, 0x1, {0x35, "9dcae8b907cf6af91013d1f49279d21e922f34b9f4043d7d106ef0185fbc37dbf2c971ae78e6e7379bc943ecbea2fd1a0e40d92cd6"}}, 0x40)
r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'})
socketpair(0x29, 0x800, 0x2, &(0x7f0000000340))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000400)={0x2, [], 0x40, "08b4bae6edcdea"})

07:12:56 executing program 0:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x9, 0x80800)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000040))
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000240)={{0x0, 0x2, 0x7f, 0x0, 0x3f, 0x1, 0x3, 0x8, 0x7, 0x99, 0x6, 0x5, 0x7, 0x9, 0x8}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000001240)={0x3, [], 0x40, "22b9c4afd61e01"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002240)={0x8, [], 0x8, "2d90bbddabcf99"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003240))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000003440)={0x6, [], 0x4, "f49520b81f1c2f"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000004440)={0x8, [], 0x7f, "572715c03606e1"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000005440))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000005640))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000005840)={0x4, [], 0xa1, "fa19d3979abf24"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000006840)={0x5512, [], 0xff, "65b46eb6fff74a"})
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000007840)={{0x0, 0x6, 0x8001, 0x1, 0x9, 0x7f, 0x1ff, 0x7, 0x100, 0x0, 0x1, 0x2, 0xdac, 0x1ff, 0x8}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000008840)={0x2, [], 0x0, "6e8b9c32a096eb"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009840))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000000aa40)={0x1, [], 0x4, "265f3034cad1b9"})

07:12:56 executing program 4:
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000000)={{0x0, 0x7, 0x6, 0x2, 0x978, 0x0, 0x0, 0x62fc7f23, 0x0, 0x0, 0x92, 0x1, 0xba, 0x0, 0xa4}})
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000001000))
socketpair(0x29, 0x3, 0xd4e1, &(0x7f0000001040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000001080))
memfd_create(&(0x7f00000010c0)='\x00', 0x1)
socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000001600)="3f6302e3292e36e1f50ff72e1ca192b7", 0x10)

07:12:56 executing program 5:
write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x33, 0x2}, 0x7)
write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000080)={0x57, 0x6f, 0x1, {0x6, [{0x0, 0x1, 0x6}, {0x2, 0x0, 0x3}, {0x0, 0x0, 0x6}, {0x80, 0x0, 0x1}, {0x0, 0x0, 0x7}, {0x60, 0x4, 0x2}]}}, 0x57)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
write$P9_RXATTRWALK(r0, &(0x7f0000000140)={0xf, 0x1f, 0x2, 0x4}, 0xf)
write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8)
write$P9_RLOPEN(r0, &(0x7f00000001c0)={0x18, 0xd, 0x2, {{0x8, 0x0, 0x2}}}, 0x18)
ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000200)=""/53)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0)
getuid()
getresgid(&(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)=<r1=>0x0)
setregid(r1, 0xee01)

07:12:56 executing program 6:
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000000)='\x00', 0x0, r0)
syz_open_dev$rtc(&(0x7f0000000080), 0xffffffff, 0x200000)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000000c0))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000002c0)={0x3, [], 0x26, "6398404f48d65f"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000012c0))
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000014c0)={{0x0, 0x9, 0x7, 0x1000, 0x10000, 0xff, 0x47e4, 0x10001, 0x6, 0x6, 0xd37e00, 0x1, 0x2, 0x80000000, 0xc8}})
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000024c0)={{0x0, 0x80, 0x4, 0x0, 0x3, 0x8, 0x9, 0x80000001, 0xff, 0x8000, 0x61a1835b, 0x8, 0xfffffffffffffff9, 0x6, 0x100000000}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000034c0)={0x100000000, [], 0x0, "f304c29834a001"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000044c0)={0x9, [], 0x6, "9d8e228f075e65"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000054c0)={0x26d2e5dc, [], 0x5, "436ddf2e57c1f3"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000064c0))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000066c0)={0xd4b, [], 0x7f, "5ddecd103853d4"})

07:12:56 executing program 7:
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000040)='++{\xf4v\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff)
ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f00000000c0))
write$P9_RLOCK(r0, &(0x7f0000000100)={0x8, 0x35, 0x2, 0x1}, 0x8)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000140)='++{\xf4v\x00', &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r1=>r0, {0x69d}}, './file0\x00'})
write$P9_RCLUNK(r0, &(0x7f0000000200)={0x7, 0x79, 0x1}, 0x7)
write$P9_RREADLINK(r1, &(0x7f0000000240)={0x16, 0x17, 0x1, {0xd, './file0/file0'}}, 0x16)
r2 = fsmount(r1, 0x0, 0x70)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0x7}}, './file0/file0/file0\x00'})
write$9p(r0, &(0x7f00000002c0)="55a086551c2800119185cc494ad570a3fb37e7b0fc5ebaad11ff54373ed7aea7b587df90a62eafb3e2f18b974dd650074f334fcf264c69dd74", 0x39)
fspick(r1, &(0x7f0000000640)='./file0/file0\x00', 0x0)

07:12:56 executing program 2:
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)={0x13, 0x65, 0xffff, 0xa, 0x6, '9P2000'}, 0x13)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
write$P9_RLOPEN(r0, &(0x7f0000000080)={0x18, 0xd, 0x1, {{0x0, 0x2, 0x2}, 0x1}}, 0x18)
write$P9_RFLUSH(r0, &(0x7f00000000c0)={0x7, 0x6d, 0x1}, 0x7)
write$P9_RFLUSH(r0, &(0x7f0000000100)={0x7, 0x6d, 0x2}, 0x7)
write$P9_RFSYNC(r0, &(0x7f0000000140)={0x7, 0x33, 0x2}, 0x7)
write$P9_RSYMLINK(r0, &(0x7f0000000180)={0x14, 0x11, 0x2, {0x8, 0x4, 0x5}}, 0x14)
write$P9_RXATTRWALK(r0, &(0x7f00000001c0)={0xf, 0x1f, 0x1, 0x4}, 0xf)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r1=>r0, {0x1}}, './file0\x00'})
write$P9_RXATTRCREATE(r1, &(0x7f0000000240)={0x7, 0x21, 0x2}, 0x7)
write$P9_RREADLINK(r0, &(0x7f0000000280)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)
write$P9_RFLUSH(r0, &(0x7f00000002c0)={0x7, 0x6d, 0x2}, 0x7)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0}, './file0\x00'})
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)

07:12:56 executing program 1:
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x9)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000))
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
write$P9_RLOPEN(r1, &(0x7f0000000080)={0x18, 0xd, 0x2, {{0x10, 0x0, 0x1}, 0xf08}}, 0x18)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r2=>r0, {0x8}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r3=>r0, {0x6}}, './file0\x00'})
r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x12400, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3, {<r5=>0xffffffffffffffff}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, r5, {0x200000}}, './file0/file0\x00'})
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000240)={{0x0, 0x7, 0x85c, 0x8, 0x0, 0x81, 0xfe, 0xd4b4, 0x7, 0x8, 0xff, 0x8001, 0x0, 0x3, 0x100000001}})
syz_open_dev$rtc(&(0x7f00000012c0), 0x60ff, 0x575100)

07:12:56 executing program 7:
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000040)='++{\xf4v\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff)
ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f00000000c0))
write$P9_RLOCK(r0, &(0x7f0000000100)={0x8, 0x35, 0x2, 0x1}, 0x8)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000140)='++{\xf4v\x00', &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r1=>r0, {0x69d}}, './file0\x00'})
write$P9_RCLUNK(r0, &(0x7f0000000200)={0x7, 0x79, 0x1}, 0x7)
write$P9_RREADLINK(r1, &(0x7f0000000240)={0x16, 0x17, 0x1, {0xd, './file0/file0'}}, 0x16)
r2 = fsmount(r1, 0x0, 0x70)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0x7}}, './file0/file0/file0\x00'})
fspick(r1, &(0x7f0000000640)='./file0/file0\x00', 0x0)

07:12:56 executing program 0:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x9, 0x80800)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000040))
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000240)={{0x0, 0x2, 0x7f, 0x0, 0x3f, 0x1, 0x3, 0x8, 0x7, 0x99, 0x6, 0x5, 0x7, 0x9, 0x8}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000001240)={0x3, [], 0x40, "22b9c4afd61e01"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002240)={0x8, [], 0x8, "2d90bbddabcf99"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003240))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000003440)={0x6, [], 0x4, "f49520b81f1c2f"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000004440)={0x8, [], 0x7f, "572715c03606e1"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000005440))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000005640))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000005840)={0x4, [], 0xa1, "fa19d3979abf24"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000006840)={0x5512, [], 0xff, "65b46eb6fff74a"})
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000007840)={{0x0, 0x6, 0x8001, 0x1, 0x9, 0x7f, 0x1ff, 0x7, 0x100, 0x0, 0x1, 0x2, 0xdac, 0x1ff, 0x8}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000008840)={0x2, [], 0x0, "6e8b9c32a096eb"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009840))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000000aa40)={0x1, [], 0x4, "265f3034cad1b9"})

07:12:56 executing program 5:
write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x33, 0x2}, 0x7)
write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000080)={0x57, 0x6f, 0x1, {0x6, [{0x0, 0x1, 0x6}, {0x2, 0x0, 0x3}, {0x0, 0x0, 0x6}, {0x80, 0x0, 0x1}, {0x0, 0x0, 0x7}, {0x60, 0x4, 0x2}]}}, 0x57)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
write$P9_RXATTRWALK(r0, &(0x7f0000000140)={0xf, 0x1f, 0x2, 0x4}, 0xf)
write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8)
write$P9_RLOPEN(r0, &(0x7f00000001c0)={0x18, 0xd, 0x2, {{0x8, 0x0, 0x2}}}, 0x18)
ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000200)=""/53)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0)
getuid()
setregid(0x0, 0xee01)

07:12:56 executing program 2:
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)={0x13, 0x65, 0xffff, 0xa, 0x6, '9P2000'}, 0x13)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
write$P9_RLOPEN(r0, &(0x7f0000000080)={0x18, 0xd, 0x1, {{0x0, 0x2, 0x2}, 0x1}}, 0x18)
write$P9_RFLUSH(r0, &(0x7f00000000c0)={0x7, 0x6d, 0x1}, 0x7)
write$P9_RFLUSH(r0, &(0x7f0000000100)={0x7, 0x6d, 0x2}, 0x7)
write$P9_RFSYNC(r0, &(0x7f0000000140)={0x7, 0x33, 0x2}, 0x7)
write$P9_RSYMLINK(r0, &(0x7f0000000180)={0x14, 0x11, 0x2, {0x8, 0x4, 0x5}}, 0x14)
write$P9_RXATTRWALK(r0, &(0x7f00000001c0)={0xf, 0x1f, 0x1, 0x4}, 0xf)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r1=>r0, {0x1}}, './file0\x00'})
write$P9_RXATTRCREATE(r1, &(0x7f0000000240)={0x7, 0x21, 0x2}, 0x7)
write$P9_RREADLINK(r0, &(0x7f0000000280)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)
write$P9_RFLUSH(r0, &(0x7f00000002c0)={0x7, 0x6d, 0x2}, 0x7)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0}, './file0\x00'})
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)

07:12:56 executing program 6:
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000000)='\x00', 0x0, r0)
syz_open_dev$rtc(&(0x7f0000000080), 0xffffffff, 0x200000)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000000c0))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000002c0)={0x3, [], 0x26, "6398404f48d65f"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000012c0))
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000014c0)={{0x0, 0x9, 0x7, 0x1000, 0x10000, 0xff, 0x47e4, 0x10001, 0x6, 0x6, 0xd37e00, 0x1, 0x2, 0x80000000, 0xc8}})
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000024c0)={{0x0, 0x80, 0x4, 0x0, 0x3, 0x8, 0x9, 0x80000001, 0xff, 0x8000, 0x61a1835b, 0x8, 0xfffffffffffffff9, 0x6, 0x100000000}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000034c0)={0x100000000, [], 0x0, "f304c29834a001"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000044c0)={0x9, [], 0x6, "9d8e228f075e65"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000054c0)={0x26d2e5dc, [], 0x5, "436ddf2e57c1f3"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000064c0))

07:12:56 executing program 3:
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x1, 'gre0\x00', 0x2}, 0x18)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e20, @local}, {0x2, 0x4e20, @local}, {0x2, 0x4e23, @rand_addr=0x64010100}, 0x4, 0x0, 0x0, 0x0, 0x3f, &(0x7f0000000040)='sit0\x00', 0x0, 0x3, 0x6})
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
ioctl$RTC_UIE_OFF(r0, 0x7004)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'})
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r1=>r0, {0x5}}, './file0\x00'})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f00000001c0)={'tunl0\x00', 0x0, 0x80, 0x80, 0xd00a, 0x4, {{0x6, 0x4, 0x0, 0x3a, 0x18, 0x65, 0x0, 0x5, 0x2f, 0x0, @rand_addr=0x64010100, @empty, {[@end]}}}}})
ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r1, {0x7}}, './file0\x00'})
write$P9_RREAD(r2, &(0x7f0000000280)={0x40, 0x75, 0x1, {0x35, "9dcae8b907cf6af91013d1f49279d21e922f34b9f4043d7d106ef0185fbc37dbf2c971ae78e6e7379bc943ecbea2fd1a0e40d92cd6"}}, 0x40)
r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000400)={0x2, [], 0x40, "08b4bae6edcdea"})

07:12:56 executing program 1:
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x9)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000))
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
write$P9_RLOPEN(r1, &(0x7f0000000080)={0x18, 0xd, 0x2, {{0x10, 0x0, 0x1}, 0xf08}}, 0x18)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r2=>r0, {0x8}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r3=>r0, {0x6}}, './file0\x00'})
r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x12400, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3, {<r5=>0xffffffffffffffff}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, r5, {0x200000}}, './file0/file0\x00'})
syz_open_dev$rtc(&(0x7f00000012c0), 0x60ff, 0x575100)

07:13:05 executing program 6:
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000000)='\x00', 0x0, r0)
syz_open_dev$rtc(&(0x7f0000000080), 0xffffffff, 0x200000)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000000c0))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000002c0)={0x3, [], 0x26, "6398404f48d65f"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000012c0))
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000014c0)={{0x0, 0x9, 0x7, 0x1000, 0x10000, 0xff, 0x47e4, 0x10001, 0x6, 0x6, 0xd37e00, 0x1, 0x2, 0x80000000, 0xc8}})
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000024c0)={{0x0, 0x80, 0x4, 0x0, 0x3, 0x8, 0x9, 0x80000001, 0xff, 0x8000, 0x61a1835b, 0x8, 0xfffffffffffffff9, 0x6, 0x100000000}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000034c0)={0x100000000, [], 0x0, "f304c29834a001"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000044c0)={0x9, [], 0x6, "9d8e228f075e65"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000054c0)={0x26d2e5dc, [], 0x5, "436ddf2e57c1f3"})

07:13:05 executing program 3:
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x1, 'gre0\x00', 0x2}, 0x18)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e20, @local}, {0x2, 0x4e20, @local}, {0x2, 0x4e23, @rand_addr=0x64010100}, 0x4, 0x0, 0x0, 0x0, 0x3f, &(0x7f0000000040)='sit0\x00', 0x0, 0x3, 0x6})
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
ioctl$RTC_UIE_OFF(r0, 0x7004)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'})
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r1=>r0, {0x5}}, './file0\x00'})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f00000001c0)={'tunl0\x00', 0x0, 0x80, 0x80, 0xd00a, 0x4, {{0x6, 0x4, 0x0, 0x3a, 0x18, 0x65, 0x0, 0x5, 0x2f, 0x0, @rand_addr=0x64010100, @empty, {[@end]}}}}})
ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r1, {0x7}}, './file0\x00'})
write$P9_RREAD(r2, &(0x7f0000000280)={0x40, 0x75, 0x1, {0x35, "9dcae8b907cf6af91013d1f49279d21e922f34b9f4043d7d106ef0185fbc37dbf2c971ae78e6e7379bc943ecbea2fd1a0e40d92cd6"}}, 0x40)
openat$cgroup_procs(r2, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000400)={0x2, [], 0x40, "08b4bae6edcdea"})

07:13:05 executing program 7:
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000040)='++{\xf4v\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff)
ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f00000000c0))
write$P9_RLOCK(r0, &(0x7f0000000100)={0x8, 0x35, 0x2, 0x1}, 0x8)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000140)='++{\xf4v\x00', &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r1=>r0, {0x69d}}, './file0\x00'})
write$P9_RCLUNK(r0, &(0x7f0000000200)={0x7, 0x79, 0x1}, 0x7)
write$P9_RREADLINK(r1, &(0x7f0000000240)={0x16, 0x17, 0x1, {0xd, './file0/file0'}}, 0x16)
fsmount(r1, 0x0, 0x70)
fspick(r1, &(0x7f0000000640)='./file0/file0\x00', 0x0)

07:13:05 executing program 0:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x9, 0x80800)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000040))
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000240)={{0x0, 0x2, 0x7f, 0x0, 0x3f, 0x1, 0x3, 0x8, 0x7, 0x99, 0x6, 0x5, 0x7, 0x9, 0x8}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000001240)={0x3, [], 0x40, "22b9c4afd61e01"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002240)={0x8, [], 0x8, "2d90bbddabcf99"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003240))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000003440)={0x6, [], 0x4, "f49520b81f1c2f"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000004440)={0x8, [], 0x7f, "572715c03606e1"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000005440))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000005640))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000005840)={0x4, [], 0xa1, "fa19d3979abf24"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000006840)={0x5512, [], 0xff, "65b46eb6fff74a"})
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000007840)={{0x0, 0x6, 0x8001, 0x1, 0x9, 0x7f, 0x1ff, 0x7, 0x100, 0x0, 0x1, 0x2, 0xdac, 0x1ff, 0x8}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000008840)={0x2, [], 0x0, "6e8b9c32a096eb"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009840))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000000aa40)={0x1, [], 0x4, "265f3034cad1b9"})

07:13:05 executing program 2:
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)={0x13, 0x65, 0xffff, 0xa, 0x6, '9P2000'}, 0x13)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
write$P9_RLOPEN(r0, &(0x7f0000000080)={0x18, 0xd, 0x1, {{0x0, 0x2, 0x2}, 0x1}}, 0x18)
write$P9_RFLUSH(r0, &(0x7f00000000c0)={0x7, 0x6d, 0x1}, 0x7)
write$P9_RFLUSH(r0, &(0x7f0000000100)={0x7, 0x6d, 0x2}, 0x7)
write$P9_RFSYNC(r0, &(0x7f0000000140)={0x7, 0x33, 0x2}, 0x7)
write$P9_RSYMLINK(r0, &(0x7f0000000180)={0x14, 0x11, 0x2, {0x8, 0x4, 0x5}}, 0x14)
write$P9_RXATTRWALK(r0, &(0x7f00000001c0)={0xf, 0x1f, 0x1, 0x4}, 0xf)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r1=>r0, {0x1}}, './file0\x00'})
write$P9_RXATTRCREATE(r1, &(0x7f0000000240)={0x7, 0x21, 0x2}, 0x7)
write$P9_RREADLINK(r0, &(0x7f0000000280)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)
write$P9_RFLUSH(r0, &(0x7f00000002c0)={0x7, 0x6d, 0x2}, 0x7)
syz_open_dev$char_usb(0xc, 0xb4, 0x9)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)

07:13:05 executing program 5:
write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x33, 0x2}, 0x7)
write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000080)={0x57, 0x6f, 0x1, {0x6, [{0x0, 0x1, 0x6}, {0x2, 0x0, 0x3}, {0x0, 0x0, 0x6}, {0x80, 0x0, 0x1}, {0x0, 0x0, 0x7}, {0x60, 0x4, 0x2}]}}, 0x57)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
write$P9_RXATTRWALK(r0, &(0x7f0000000140)={0xf, 0x1f, 0x2, 0x4}, 0xf)
write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8)
write$P9_RLOPEN(r0, &(0x7f00000001c0)={0x18, 0xd, 0x2, {{0x8, 0x0, 0x2}}}, 0x18)
ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000200)=""/53)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0)
setregid(0x0, 0xee01)

07:13:05 executing program 1:
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x9)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000))
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
write$P9_RLOPEN(r1, &(0x7f0000000080)={0x18, 0xd, 0x2, {{0x10, 0x0, 0x1}, 0xf08}}, 0x18)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r2=>r0, {0x8}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r3=>r0, {0x6}}, './file0\x00'})
openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x12400, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
syz_open_dev$rtc(&(0x7f00000012c0), 0x60ff, 0x575100)

07:13:05 executing program 4:
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000000)={{0x0, 0x7, 0x6, 0x2, 0x978, 0x0, 0x0, 0x62fc7f23, 0x0, 0x0, 0x92, 0x1, 0xba, 0x0, 0xa4}})
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000001000))
socketpair(0x29, 0x3, 0xd4e1, &(0x7f0000001040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000001080))
memfd_create(&(0x7f00000010c0)='\x00', 0x1)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000001600)="3f6302e3292e36e1f50ff72e1ca192b7", 0x10)

07:13:05 executing program 1:
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x9)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000))
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
write$P9_RLOPEN(r1, &(0x7f0000000080)={0x18, 0xd, 0x2, {{0x10, 0x0, 0x1}, 0xf08}}, 0x18)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r2=>r0, {0x8}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'})
openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x12400, 0x0)
syz_open_dev$rtc(&(0x7f00000012c0), 0x60ff, 0x575100)

07:13:05 executing program 5:
write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x33, 0x2}, 0x7)
write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000080)={0x57, 0x6f, 0x1, {0x6, [{0x0, 0x1, 0x6}, {0x2, 0x0, 0x3}, {0x0, 0x0, 0x6}, {0x80, 0x0, 0x1}, {0x0, 0x0, 0x7}, {0x60, 0x4, 0x2}]}}, 0x57)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
write$P9_RXATTRWALK(r0, &(0x7f0000000140)={0xf, 0x1f, 0x2, 0x4}, 0xf)
write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8)
write$P9_RLOPEN(r0, &(0x7f00000001c0)={0x18, 0xd, 0x2, {{0x8, 0x0, 0x2}}}, 0x18)
ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000200)=""/53)
setregid(0x0, 0xee01)

07:13:05 executing program 6:
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000000)='\x00', 0x0, r0)
syz_open_dev$rtc(&(0x7f0000000080), 0xffffffff, 0x200000)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000000c0))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000002c0)={0x3, [], 0x26, "6398404f48d65f"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000012c0))
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000014c0)={{0x0, 0x9, 0x7, 0x1000, 0x10000, 0xff, 0x47e4, 0x10001, 0x6, 0x6, 0xd37e00, 0x1, 0x2, 0x80000000, 0xc8}})
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000024c0)={{0x0, 0x80, 0x4, 0x0, 0x3, 0x8, 0x9, 0x80000001, 0xff, 0x8000, 0x61a1835b, 0x8, 0xfffffffffffffff9, 0x6, 0x100000000}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000034c0)={0x100000000, [], 0x0, "f304c29834a001"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000044c0)={0x9, [], 0x6, "9d8e228f075e65"})

07:13:05 executing program 7:
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000040)='++{\xf4v\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff)
ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f00000000c0))
write$P9_RLOCK(r0, &(0x7f0000000100)={0x8, 0x35, 0x2, 0x1}, 0x8)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000140)='++{\xf4v\x00', &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r1=>r0, {0x69d}}, './file0\x00'})
write$P9_RCLUNK(r0, &(0x7f0000000200)={0x7, 0x79, 0x1}, 0x7)
write$P9_RREADLINK(r1, &(0x7f0000000240)={0x16, 0x17, 0x1, {0xd, './file0/file0'}}, 0x16)
fspick(r1, &(0x7f0000000640)='./file0/file0\x00', 0x0)

07:13:05 executing program 3:
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x1, 'gre0\x00', 0x2}, 0x18)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e20, @local}, {0x2, 0x4e20, @local}, {0x2, 0x4e23, @rand_addr=0x64010100}, 0x4, 0x0, 0x0, 0x0, 0x3f, &(0x7f0000000040)='sit0\x00', 0x0, 0x3, 0x6})
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
ioctl$RTC_UIE_OFF(r0, 0x7004)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'})
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r1=>r0, {0x5}}, './file0\x00'})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f00000001c0)={'tunl0\x00', 0x0, 0x80, 0x80, 0xd00a, 0x4, {{0x6, 0x4, 0x0, 0x3a, 0x18, 0x65, 0x0, 0x5, 0x2f, 0x0, @rand_addr=0x64010100, @empty, {[@end]}}}}})
ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r1, {0x7}}, './file0\x00'})
write$P9_RREAD(r2, &(0x7f0000000280)={0x40, 0x75, 0x1, {0x35, "9dcae8b907cf6af91013d1f49279d21e922f34b9f4043d7d106ef0185fbc37dbf2c971ae78e6e7379bc943ecbea2fd1a0e40d92cd6"}}, 0x40)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000400)={0x2, [], 0x40, "08b4bae6edcdea"})

07:13:05 executing program 2:
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)={0x13, 0x65, 0xffff, 0xa, 0x6, '9P2000'}, 0x13)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
write$P9_RLOPEN(r0, &(0x7f0000000080)={0x18, 0xd, 0x1, {{0x0, 0x2, 0x2}, 0x1}}, 0x18)
write$P9_RFLUSH(r0, &(0x7f00000000c0)={0x7, 0x6d, 0x1}, 0x7)
write$P9_RFLUSH(r0, &(0x7f0000000100)={0x7, 0x6d, 0x2}, 0x7)
write$P9_RFSYNC(r0, &(0x7f0000000140)={0x7, 0x33, 0x2}, 0x7)
write$P9_RSYMLINK(r0, &(0x7f0000000180)={0x14, 0x11, 0x2, {0x8, 0x4, 0x5}}, 0x14)
write$P9_RXATTRWALK(r0, &(0x7f00000001c0)={0xf, 0x1f, 0x1, 0x4}, 0xf)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r1=>r0, {0x1}}, './file0\x00'})
write$P9_RXATTRCREATE(r1, &(0x7f0000000240)={0x7, 0x21, 0x2}, 0x7)
write$P9_RREADLINK(r0, &(0x7f0000000280)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)
syz_open_dev$char_usb(0xc, 0xb4, 0x9)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)

07:13:05 executing program 4:
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000000)={{0x0, 0x7, 0x6, 0x2, 0x978, 0x0, 0x0, 0x62fc7f23, 0x0, 0x0, 0x92, 0x1, 0xba, 0x0, 0xa4}})
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000001000))
socketpair(0x29, 0x3, 0xd4e1, &(0x7f0000001040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000001080))
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000001600)="3f6302e3292e36e1f50ff72e1ca192b7", 0x10)

07:13:05 executing program 1:
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x9)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000))
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
write$P9_RLOPEN(r1, &(0x7f0000000080)={0x18, 0xd, 0x2, {{0x10, 0x0, 0x1}, 0xf08}}, 0x18)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r2=>r0, {0x8}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'})
syz_open_dev$rtc(&(0x7f00000012c0), 0x60ff, 0x575100)

07:13:14 executing program 5:
write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x33, 0x2}, 0x7)
write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000080)={0x57, 0x6f, 0x1, {0x6, [{0x0, 0x1, 0x6}, {0x2, 0x0, 0x3}, {0x0, 0x0, 0x6}, {0x80, 0x0, 0x1}, {0x0, 0x0, 0x7}, {0x60, 0x4, 0x2}]}}, 0x57)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
write$P9_RXATTRWALK(r0, &(0x7f0000000140)={0xf, 0x1f, 0x2, 0x4}, 0xf)
write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8)
write$P9_RLOPEN(r0, &(0x7f00000001c0)={0x18, 0xd, 0x2, {{0x8, 0x0, 0x2}}}, 0x18)
setregid(0x0, 0xee01)

07:13:14 executing program 1:
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x9)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000))
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
write$P9_RLOPEN(r1, &(0x7f0000000080)={0x18, 0xd, 0x2, {{0x10, 0x0, 0x1}, 0xf08}}, 0x18)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'})
syz_open_dev$rtc(&(0x7f00000012c0), 0x60ff, 0x575100)

07:13:14 executing program 6:
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000000)='\x00', 0x0, r0)
syz_open_dev$rtc(&(0x7f0000000080), 0xffffffff, 0x200000)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000000c0))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000002c0)={0x3, [], 0x26, "6398404f48d65f"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000012c0))
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000014c0)={{0x0, 0x9, 0x7, 0x1000, 0x10000, 0xff, 0x47e4, 0x10001, 0x6, 0x6, 0xd37e00, 0x1, 0x2, 0x80000000, 0xc8}})
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000024c0)={{0x0, 0x80, 0x4, 0x0, 0x3, 0x8, 0x9, 0x80000001, 0xff, 0x8000, 0x61a1835b, 0x8, 0xfffffffffffffff9, 0x6, 0x100000000}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000034c0)={0x100000000, [], 0x0, "f304c29834a001"})

07:13:14 executing program 7:
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000040)='++{\xf4v\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff)
ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f00000000c0))
write$P9_RLOCK(r0, &(0x7f0000000100)={0x8, 0x35, 0x2, 0x1}, 0x8)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000140)='++{\xf4v\x00', &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r1=>r0, {0x69d}}, './file0\x00'})
write$P9_RCLUNK(r0, &(0x7f0000000200)={0x7, 0x79, 0x1}, 0x7)
fspick(r1, &(0x7f0000000640)='./file0/file0\x00', 0x0)

07:13:14 executing program 2:
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)={0x13, 0x65, 0xffff, 0xa, 0x6, '9P2000'}, 0x13)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
write$P9_RLOPEN(r0, &(0x7f0000000080)={0x18, 0xd, 0x1, {{0x0, 0x2, 0x2}, 0x1}}, 0x18)
write$P9_RFLUSH(r0, &(0x7f00000000c0)={0x7, 0x6d, 0x1}, 0x7)
write$P9_RFLUSH(r0, &(0x7f0000000100)={0x7, 0x6d, 0x2}, 0x7)
write$P9_RFSYNC(r0, &(0x7f0000000140)={0x7, 0x33, 0x2}, 0x7)
write$P9_RSYMLINK(r0, &(0x7f0000000180)={0x14, 0x11, 0x2, {0x8, 0x4, 0x5}}, 0x14)
write$P9_RXATTRWALK(r0, &(0x7f00000001c0)={0xf, 0x1f, 0x1, 0x4}, 0xf)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r1=>r0, {0x1}}, './file0\x00'})
write$P9_RXATTRCREATE(r1, &(0x7f0000000240)={0x7, 0x21, 0x2}, 0x7)
syz_open_dev$char_usb(0xc, 0xb4, 0x9)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)

07:13:14 executing program 4:
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000000)={{0x0, 0x7, 0x6, 0x2, 0x978, 0x0, 0x0, 0x62fc7f23, 0x0, 0x0, 0x92, 0x1, 0xba, 0x0, 0xa4}})
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000001000))
socketpair(0x29, 0x3, 0xd4e1, &(0x7f0000001040))
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000001600)="3f6302e3292e36e1f50ff72e1ca192b7", 0x10)

07:13:14 executing program 0:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x9, 0x80800)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000040))
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000240)={{0x0, 0x2, 0x7f, 0x0, 0x3f, 0x1, 0x3, 0x8, 0x7, 0x99, 0x6, 0x5, 0x7, 0x9, 0x8}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000001240)={0x3, [], 0x40, "22b9c4afd61e01"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002240)={0x8, [], 0x8, "2d90bbddabcf99"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003240))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000003440)={0x6, [], 0x4, "f49520b81f1c2f"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000004440)={0x8, [], 0x7f, "572715c03606e1"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000005440))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000005640))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000005840)={0x4, [], 0xa1, "fa19d3979abf24"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000006840)={0x5512, [], 0xff, "65b46eb6fff74a"})
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000007840)={{0x0, 0x6, 0x8001, 0x1, 0x9, 0x7f, 0x1ff, 0x7, 0x100, 0x0, 0x1, 0x2, 0xdac, 0x1ff, 0x8}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000008840)={0x2, [], 0x0, "6e8b9c32a096eb"})
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000009a40)={{0x0, 0x7ff, 0x2, 0x2, 0x4, 0x5, 0xfffffffffffffff8, 0x8, 0xe42b, 0x27, 0x8, 0xfff, 0x8, 0x4}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000000aa40)={0x1, [], 0x4, "265f3034cad1b9"})

07:13:14 executing program 3:
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x1, 'gre0\x00', 0x2}, 0x18)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e20, @local}, {0x2, 0x4e20, @local}, {0x2, 0x4e23, @rand_addr=0x64010100}, 0x4, 0x0, 0x0, 0x0, 0x3f, &(0x7f0000000040)='sit0\x00', 0x0, 0x3, 0x6})
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
ioctl$RTC_UIE_OFF(r0, 0x7004)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'})
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r1=>r0, {0x5}}, './file0\x00'})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f00000001c0)={'tunl0\x00', 0x0, 0x80, 0x80, 0xd00a, 0x4, {{0x6, 0x4, 0x0, 0x3a, 0x18, 0x65, 0x0, 0x5, 0x2f, 0x0, @rand_addr=0x64010100, @empty, {[@end]}}}}})
ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0x7}}, './file0\x00'})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000400)={0x2, [], 0x40, "08b4bae6edcdea"})

07:13:14 executing program 7:
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000040)='++{\xf4v\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff)
ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f00000000c0))
write$P9_RLOCK(r0, &(0x7f0000000100)={0x8, 0x35, 0x2, 0x1}, 0x8)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000140)='++{\xf4v\x00', &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r1=>r0, {0x69d}}, './file0\x00'})
fspick(r1, &(0x7f0000000640)='./file0/file0\x00', 0x0)

07:13:14 executing program 0:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x9, 0x80800)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000040))
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000240)={{0x0, 0x2, 0x7f, 0x0, 0x3f, 0x1, 0x3, 0x8, 0x7, 0x99, 0x6, 0x5, 0x7, 0x9, 0x8}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000001240)={0x3, [], 0x40, "22b9c4afd61e01"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002240)={0x8, [], 0x8, "2d90bbddabcf99"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003240))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000003440)={0x6, [], 0x4, "f49520b81f1c2f"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000004440)={0x8, [], 0x7f, "572715c03606e1"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000005440))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000005640))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000005840)={0x4, [], 0xa1, "fa19d3979abf24"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000006840)={0x5512, [], 0xff, "65b46eb6fff74a"})
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000007840)={{0x0, 0x6, 0x8001, 0x1, 0x9, 0x7f, 0x1ff, 0x7, 0x100, 0x0, 0x1, 0x2, 0xdac, 0x1ff, 0x8}})
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000009a40)={{0x0, 0x7ff, 0x2, 0x2, 0x4, 0x5, 0xfffffffffffffff8, 0x8, 0xe42b, 0x27, 0x8, 0xfff, 0x8, 0x4}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000000aa40)={0x1, [], 0x4, "265f3034cad1b9"})

07:13:14 executing program 6:
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000000)='\x00', 0x0, r0)
syz_open_dev$rtc(&(0x7f0000000080), 0xffffffff, 0x200000)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000000c0))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000002c0)={0x3, [], 0x26, "6398404f48d65f"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000012c0))
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000014c0)={{0x0, 0x9, 0x7, 0x1000, 0x10000, 0xff, 0x47e4, 0x10001, 0x6, 0x6, 0xd37e00, 0x1, 0x2, 0x80000000, 0xc8}})
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000024c0)={{0x0, 0x80, 0x4, 0x0, 0x3, 0x8, 0x9, 0x80000001, 0xff, 0x8000, 0x61a1835b, 0x8, 0xfffffffffffffff9, 0x6, 0x100000000}})

07:13:14 executing program 3:
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x1, 'gre0\x00', 0x2}, 0x18)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e20, @local}, {0x2, 0x4e20, @local}, {0x2, 0x4e23, @rand_addr=0x64010100}, 0x4, 0x0, 0x0, 0x0, 0x3f, &(0x7f0000000040)='sit0\x00', 0x0, 0x3, 0x6})
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
ioctl$RTC_UIE_OFF(r0, 0x7004)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'})
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r1=>r0, {0x5}}, './file0\x00'})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f00000001c0)={'tunl0\x00', 0x0, 0x80, 0x80, 0xd00a, 0x4, {{0x6, 0x4, 0x0, 0x3a, 0x18, 0x65, 0x0, 0x5, 0x2f, 0x0, @rand_addr=0x64010100, @empty, {[@end]}}}}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000400)={0x2, [], 0x40, "08b4bae6edcdea"})

07:13:14 executing program 2:
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)={0x13, 0x65, 0xffff, 0xa, 0x6, '9P2000'}, 0x13)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
write$P9_RLOPEN(r0, &(0x7f0000000080)={0x18, 0xd, 0x1, {{0x0, 0x2, 0x2}, 0x1}}, 0x18)
write$P9_RFLUSH(r0, &(0x7f00000000c0)={0x7, 0x6d, 0x1}, 0x7)
write$P9_RFLUSH(r0, &(0x7f0000000100)={0x7, 0x6d, 0x2}, 0x7)
write$P9_RFSYNC(r0, &(0x7f0000000140)={0x7, 0x33, 0x2}, 0x7)
write$P9_RSYMLINK(r0, &(0x7f0000000180)={0x14, 0x11, 0x2, {0x8, 0x4, 0x5}}, 0x14)
write$P9_RXATTRWALK(r0, &(0x7f00000001c0)={0xf, 0x1f, 0x1, 0x4}, 0xf)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'})
syz_open_dev$char_usb(0xc, 0xb4, 0x9)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)

07:13:14 executing program 5:
write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x33, 0x2}, 0x7)
write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000080)={0x57, 0x6f, 0x1, {0x6, [{0x0, 0x1, 0x6}, {0x2, 0x0, 0x3}, {0x0, 0x0, 0x6}, {0x80, 0x0, 0x1}, {0x0, 0x0, 0x7}, {0x60, 0x4, 0x2}]}}, 0x57)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
write$P9_RXATTRWALK(r0, &(0x7f0000000140)={0xf, 0x1f, 0x2, 0x4}, 0xf)
write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8)
setregid(0x0, 0xee01)

07:13:22 executing program 3:
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x1, 'gre0\x00', 0x2}, 0x18)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e20, @local}, {0x2, 0x4e20, @local}, {0x2, 0x4e23, @rand_addr=0x64010100}, 0x4, 0x0, 0x0, 0x0, 0x3f, &(0x7f0000000040)='sit0\x00', 0x0, 0x3, 0x6})
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
ioctl$RTC_UIE_OFF(r0, 0x7004)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'})
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000400)={0x2, [], 0x40, "08b4bae6edcdea"})

07:13:22 executing program 0:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x9, 0x80800)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000040))
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000240)={{0x0, 0x2, 0x7f, 0x0, 0x3f, 0x1, 0x3, 0x8, 0x7, 0x99, 0x6, 0x5, 0x7, 0x9, 0x8}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000001240)={0x3, [], 0x40, "22b9c4afd61e01"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002240)={0x8, [], 0x8, "2d90bbddabcf99"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003240))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000003440)={0x6, [], 0x4, "f49520b81f1c2f"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000004440)={0x8, [], 0x7f, "572715c03606e1"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000005440))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000005640))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000005840)={0x4, [], 0xa1, "fa19d3979abf24"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000006840)={0x5512, [], 0xff, "65b46eb6fff74a"})
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000007840)={{0x0, 0x6, 0x8001, 0x1, 0x9, 0x7f, 0x1ff, 0x7, 0x100, 0x0, 0x1, 0x2, 0xdac, 0x1ff, 0x8}})
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000009a40)={{0x0, 0x7ff, 0x2, 0x2, 0x4, 0x5, 0xfffffffffffffff8, 0x8, 0xe42b, 0x27, 0x8, 0xfff, 0x8, 0x4}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000000aa40)={0x1, [], 0x4, "265f3034cad1b9"})

07:13:22 executing program 2:
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)={0x13, 0x65, 0xffff, 0xa, 0x6, '9P2000'}, 0x13)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
write$P9_RLOPEN(r0, &(0x7f0000000080)={0x18, 0xd, 0x1, {{0x0, 0x2, 0x2}, 0x1}}, 0x18)
write$P9_RFLUSH(r0, &(0x7f00000000c0)={0x7, 0x6d, 0x1}, 0x7)
write$P9_RFLUSH(r0, &(0x7f0000000100)={0x7, 0x6d, 0x2}, 0x7)
write$P9_RFSYNC(r0, &(0x7f0000000140)={0x7, 0x33, 0x2}, 0x7)
write$P9_RSYMLINK(r0, &(0x7f0000000180)={0x14, 0x11, 0x2, {0x8, 0x4, 0x5}}, 0x14)
write$P9_RXATTRWALK(r0, &(0x7f00000001c0)={0xf, 0x1f, 0x1, 0x4}, 0xf)
syz_open_dev$char_usb(0xc, 0xb4, 0x9)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)

07:13:22 executing program 5:
write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x33, 0x2}, 0x7)
write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000080)={0x57, 0x6f, 0x1, {0x6, [{0x0, 0x1, 0x6}, {0x2, 0x0, 0x3}, {0x0, 0x0, 0x6}, {0x80, 0x0, 0x1}, {0x0, 0x0, 0x7}, {0x60, 0x4, 0x2}]}}, 0x57)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
write$P9_RXATTRWALK(r0, &(0x7f0000000140)={0xf, 0x1f, 0x2, 0x4}, 0xf)
setregid(0x0, 0xee01)

07:13:22 executing program 4:
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000000)={{0x0, 0x7, 0x6, 0x2, 0x978, 0x0, 0x0, 0x62fc7f23, 0x0, 0x0, 0x92, 0x1, 0xba, 0x0, 0xa4}})
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000001000))
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000001600)="3f6302e3292e36e1f50ff72e1ca192b7", 0x10)

07:13:22 executing program 7:
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000040)='++{\xf4v\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff)
ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f00000000c0))
write$P9_RLOCK(r0, &(0x7f0000000100)={0x8, 0x35, 0x2, 0x1}, 0x8)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000140)='++{\xf4v\x00', &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff)
fspick(0xffffffffffffffff, &(0x7f0000000640)='./file0/file0\x00', 0x0)

07:13:22 executing program 6:
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000000)='\x00', 0x0, r0)
syz_open_dev$rtc(&(0x7f0000000080), 0xffffffff, 0x200000)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000000c0))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000002c0)={0x3, [], 0x26, "6398404f48d65f"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000012c0))
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000014c0)={{0x0, 0x9, 0x7, 0x1000, 0x10000, 0xff, 0x47e4, 0x10001, 0x6, 0x6, 0xd37e00, 0x1, 0x2, 0x80000000, 0xc8}})
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000024c0)={{0x0, 0x80, 0x4, 0x0, 0x3, 0x8, 0x9, 0x80000001, 0xff, 0x8000, 0x61a1835b, 0x8, 0xfffffffffffffff9, 0x6, 0x100000000}})

07:13:22 executing program 1:
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x9)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000))
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
write$P9_RLOPEN(r1, &(0x7f0000000080)={0x18, 0xd, 0x2, {{0x10, 0x0, 0x1}, 0xf08}}, 0x18)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'})
syz_open_dev$rtc(&(0x7f00000012c0), 0x60ff, 0x575100)

07:13:22 executing program 3:
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x1, 'gre0\x00', 0x2}, 0x18)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e20, @local}, {0x2, 0x4e20, @local}, {0x2, 0x4e23, @rand_addr=0x64010100}, 0x4, 0x0, 0x0, 0x0, 0x3f, &(0x7f0000000040)='sit0\x00', 0x0, 0x3, 0x6})
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
ioctl$RTC_UIE_OFF(r0, 0x7004)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000400)={0x2, [], 0x40, "08b4bae6edcdea"})

07:13:22 executing program 0:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x9, 0x80800)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000040))
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000240)={{0x0, 0x2, 0x7f, 0x0, 0x3f, 0x1, 0x3, 0x8, 0x7, 0x99, 0x6, 0x5, 0x7, 0x9, 0x8}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000001240)={0x3, [], 0x40, "22b9c4afd61e01"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002240)={0x8, [], 0x8, "2d90bbddabcf99"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003240))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000003440)={0x6, [], 0x4, "f49520b81f1c2f"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000004440)={0x8, [], 0x7f, "572715c03606e1"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000005440))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000005640))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000005840)={0x4, [], 0xa1, "fa19d3979abf24"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000006840)={0x5512, [], 0xff, "65b46eb6fff74a"})
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000009a40)={{0x0, 0x7ff, 0x2, 0x2, 0x4, 0x5, 0xfffffffffffffff8, 0x8, 0xe42b, 0x27, 0x8, 0xfff, 0x8, 0x4}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000000aa40)={0x1, [], 0x4, "265f3034cad1b9"})

07:13:22 executing program 2:
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)={0x13, 0x65, 0xffff, 0xa, 0x6, '9P2000'}, 0x13)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
write$P9_RLOPEN(r0, &(0x7f0000000080)={0x18, 0xd, 0x1, {{0x0, 0x2, 0x2}, 0x1}}, 0x18)
write$P9_RFLUSH(r0, &(0x7f00000000c0)={0x7, 0x6d, 0x1}, 0x7)
write$P9_RFLUSH(r0, &(0x7f0000000100)={0x7, 0x6d, 0x2}, 0x7)
write$P9_RFSYNC(r0, &(0x7f0000000140)={0x7, 0x33, 0x2}, 0x7)
write$P9_RSYMLINK(r0, &(0x7f0000000180)={0x14, 0x11, 0x2, {0x8, 0x4, 0x5}}, 0x14)
syz_open_dev$char_usb(0xc, 0xb4, 0x9)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)

07:13:22 executing program 4:
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000000)={{0x0, 0x7, 0x6, 0x2, 0x978, 0x0, 0x0, 0x62fc7f23, 0x0, 0x0, 0x92, 0x1, 0xba, 0x0, 0xa4}})
socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000001600)="3f6302e3292e36e1f50ff72e1ca192b7", 0x10)

07:13:22 executing program 7:
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000040)='++{\xf4v\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff)
ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f00000000c0))
write$P9_RLOCK(r0, &(0x7f0000000100)={0x8, 0x35, 0x2, 0x1}, 0x8)
fspick(0xffffffffffffffff, &(0x7f0000000640)='./file0/file0\x00', 0x0)

07:13:22 executing program 1:
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x9)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000))
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
write$P9_RLOPEN(r1, &(0x7f0000000080)={0x18, 0xd, 0x2, {{0x10, 0x0, 0x1}, 0xf08}}, 0x18)
syz_open_dev$rtc(&(0x7f00000012c0), 0x60ff, 0x575100)

07:13:22 executing program 5:
write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x33, 0x2}, 0x7)
write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000080)={0x57, 0x6f, 0x1, {0x6, [{0x0, 0x1, 0x6}, {0x2, 0x0, 0x3}, {0x0, 0x0, 0x6}, {0x80, 0x0, 0x1}, {0x0, 0x0, 0x7}, {0x60, 0x4, 0x2}]}}, 0x57)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18}, './file0\x00'})
setregid(0x0, 0xee01)

07:13:22 executing program 3:
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x1, 'gre0\x00', 0x2}, 0x18)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e20, @local}, {0x2, 0x4e20, @local}, {0x2, 0x4e23, @rand_addr=0x64010100}, 0x4, 0x0, 0x0, 0x0, 0x3f, &(0x7f0000000040)='sit0\x00', 0x0, 0x3, 0x6})
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
ioctl$RTC_UIE_OFF(r0, 0x7004)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000400)={0x2, [], 0x40, "08b4bae6edcdea"})

07:13:22 executing program 6:
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000000)='\x00', 0x0, r0)
syz_open_dev$rtc(&(0x7f0000000080), 0xffffffff, 0x200000)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000000c0))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000002c0)={0x3, [], 0x26, "6398404f48d65f"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000012c0))
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000014c0)={{0x0, 0x9, 0x7, 0x1000, 0x10000, 0xff, 0x47e4, 0x10001, 0x6, 0x6, 0xd37e00, 0x1, 0x2, 0x80000000, 0xc8}})

07:13:22 executing program 0:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x9, 0x80800)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000040))
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000240)={{0x0, 0x2, 0x7f, 0x0, 0x3f, 0x1, 0x3, 0x8, 0x7, 0x99, 0x6, 0x5, 0x7, 0x9, 0x8}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000001240)={0x3, [], 0x40, "22b9c4afd61e01"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002240)={0x8, [], 0x8, "2d90bbddabcf99"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003240))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000003440)={0x6, [], 0x4, "f49520b81f1c2f"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000004440)={0x8, [], 0x7f, "572715c03606e1"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000005440))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000005640))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000005840)={0x4, [], 0xa1, "fa19d3979abf24"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000006840)={0x5512, [], 0xff, "65b46eb6fff74a"})
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000009a40)={{0x0, 0x7ff, 0x2, 0x2, 0x4, 0x5, 0xfffffffffffffff8, 0x8, 0xe42b, 0x27, 0x8, 0xfff, 0x8, 0x4}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000000aa40)={0x1, [], 0x4, "265f3034cad1b9"})

07:13:22 executing program 1:
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x9)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000))
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'})
syz_open_dev$rtc(&(0x7f00000012c0), 0x60ff, 0x575100)

07:13:22 executing program 2:
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)={0x13, 0x65, 0xffff, 0xa, 0x6, '9P2000'}, 0x13)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
write$P9_RLOPEN(r0, &(0x7f0000000080)={0x18, 0xd, 0x1, {{0x0, 0x2, 0x2}, 0x1}}, 0x18)
write$P9_RFLUSH(r0, &(0x7f00000000c0)={0x7, 0x6d, 0x1}, 0x7)
write$P9_RFLUSH(r0, &(0x7f0000000100)={0x7, 0x6d, 0x2}, 0x7)
write$P9_RFSYNC(r0, &(0x7f0000000140)={0x7, 0x33, 0x2}, 0x7)
syz_open_dev$char_usb(0xc, 0xb4, 0x9)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)

07:13:22 executing program 3:
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x1, 'gre0\x00', 0x2}, 0x18)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e20, @local}, {0x2, 0x4e20, @local}, {0x2, 0x4e23, @rand_addr=0x64010100}, 0x4, 0x0, 0x0, 0x0, 0x3f, &(0x7f0000000040)='sit0\x00', 0x0, 0x3, 0x6})
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000400)={0x2, [], 0x40, "08b4bae6edcdea"})

[  191.856801] Bluetooth: hci1: command 0x0406 tx timeout
[  191.858410] Bluetooth: hci2: command 0x0406 tx timeout
[  191.859422] Bluetooth: hci0: command 0x0406 tx timeout
[  191.860371] Bluetooth: hci3: command 0x0406 tx timeout
[  191.861363] Bluetooth: hci5: command 0x0406 tx timeout
[  191.862467] Bluetooth: hci4: command 0x0406 tx timeout
[  191.863460] Bluetooth: hci6: command 0x0406 tx timeout
[  191.864575] Bluetooth: hci7: command 0x0406 tx timeout
07:13:31 executing program 7:
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000040)='++{\xf4v\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff)
ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f00000000c0))
fspick(0xffffffffffffffff, &(0x7f0000000640)='./file0/file0\x00', 0x0)

07:13:31 executing program 4:
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000000)={{0x0, 0x7, 0x6, 0x2, 0x978, 0x0, 0x0, 0x62fc7f23, 0x0, 0x0, 0x92, 0x1, 0xba, 0x0, 0xa4}})
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000001600)="3f6302e3292e36e1f50ff72e1ca192b7", 0x10)

07:13:31 executing program 6:
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000000)='\x00', 0x0, r0)
syz_open_dev$rtc(&(0x7f0000000080), 0xffffffff, 0x200000)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000000c0))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000002c0)={0x3, [], 0x26, "6398404f48d65f"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000012c0))
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000014c0)={{0x0, 0x9, 0x7, 0x1000, 0x10000, 0xff, 0x47e4, 0x10001, 0x6, 0x6, 0xd37e00, 0x1, 0x2, 0x80000000, 0xc8}})

07:13:31 executing program 5:
write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x33, 0x2}, 0x7)
write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000080)={0x57, 0x6f, 0x1, {0x6, [{0x0, 0x1, 0x6}, {0x2, 0x0, 0x3}, {0x0, 0x0, 0x6}, {0x80, 0x0, 0x1}, {0x0, 0x0, 0x7}, {0x60, 0x4, 0x2}]}}, 0x57)
setregid(0x0, 0xee01)

07:13:31 executing program 1:
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x9)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000))
syz_open_dev$rtc(&(0x7f00000012c0), 0x60ff, 0x575100)

07:13:31 executing program 3:
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x1, 'gre0\x00', 0x2}, 0x18)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e20, @local}, {0x2, 0x4e20, @local}, {0x2, 0x4e23, @rand_addr=0x64010100}, 0x4, 0x0, 0x0, 0x0, 0x3f, &(0x7f0000000040)='sit0\x00', 0x0, 0x3, 0x6})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000400)={0x2, [], 0x40, "08b4bae6edcdea"})

07:13:31 executing program 2:
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)={0x13, 0x65, 0xffff, 0xa, 0x6, '9P2000'}, 0x13)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
write$P9_RLOPEN(r0, &(0x7f0000000080)={0x18, 0xd, 0x1, {{0x0, 0x2, 0x2}, 0x1}}, 0x18)
write$P9_RFLUSH(r0, &(0x7f00000000c0)={0x7, 0x6d, 0x1}, 0x7)
write$P9_RFLUSH(r0, &(0x7f0000000100)={0x7, 0x6d, 0x2}, 0x7)
syz_open_dev$char_usb(0xc, 0xb4, 0x9)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)

07:13:31 executing program 0:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x9, 0x80800)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000040))
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000240)={{0x0, 0x2, 0x7f, 0x0, 0x3f, 0x1, 0x3, 0x8, 0x7, 0x99, 0x6, 0x5, 0x7, 0x9, 0x8}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000001240)={0x3, [], 0x40, "22b9c4afd61e01"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002240)={0x8, [], 0x8, "2d90bbddabcf99"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003240))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000003440)={0x6, [], 0x4, "f49520b81f1c2f"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000004440)={0x8, [], 0x7f, "572715c03606e1"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000005440))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000005640))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000005840)={0x4, [], 0xa1, "fa19d3979abf24"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000006840)={0x5512, [], 0xff, "65b46eb6fff74a"})
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000009a40)={{0x0, 0x7ff, 0x2, 0x2, 0x4, 0x5, 0xfffffffffffffff8, 0x8, 0xe42b, 0x27, 0x8, 0xfff, 0x8, 0x4}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000000aa40)={0x1, [], 0x4, "265f3034cad1b9"})

07:13:31 executing program 5:
write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x33, 0x2}, 0x7)
setregid(0x0, 0xee01)

07:13:31 executing program 6:
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000000)='\x00', 0x0, r0)
syz_open_dev$rtc(&(0x7f0000000080), 0xffffffff, 0x200000)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000000c0))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000002c0)={0x3, [], 0x26, "6398404f48d65f"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000012c0))

07:13:31 executing program 4:
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000001600)="3f6302e3292e36e1f50ff72e1ca192b7", 0x10)

07:13:31 executing program 2:
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)={0x13, 0x65, 0xffff, 0xa, 0x6, '9P2000'}, 0x13)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
write$P9_RLOPEN(r0, &(0x7f0000000080)={0x18, 0xd, 0x1, {{0x0, 0x2, 0x2}, 0x1}}, 0x18)
write$P9_RFLUSH(r0, &(0x7f00000000c0)={0x7, 0x6d, 0x1}, 0x7)
syz_open_dev$char_usb(0xc, 0xb4, 0x9)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)

07:13:31 executing program 7:
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000040)='++{\xf4v\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff)
fspick(0xffffffffffffffff, &(0x7f0000000640)='./file0/file0\x00', 0x0)

07:13:31 executing program 1:
syz_open_dev$char_usb(0xc, 0xb4, 0x9)
syz_open_dev$rtc(&(0x7f00000012c0), 0x60ff, 0x575100)

07:13:38 executing program 6:
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000000)='\x00', 0x0, r0)
syz_open_dev$rtc(&(0x7f0000000080), 0xffffffff, 0x200000)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000000c0))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000002c0)={0x3, [], 0x26, "6398404f48d65f"})

07:13:38 executing program 3:
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x1, 'gre0\x00', 0x2}, 0x18)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e20, @local}, {0x2, 0x4e20, @local}, {0x2, 0x4e23, @rand_addr=0x64010100}, 0x4, 0x0, 0x0, 0x0, 0x3f, &(0x7f0000000040)='sit0\x00', 0x0, 0x3, 0x6})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000400)={0x2, [], 0x40, "08b4bae6edcdea"})

07:13:38 executing program 1:
syz_open_dev$rtc(&(0x7f00000012c0), 0x60ff, 0x575100)

07:13:38 executing program 7:
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000040)='++{\xf4v\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff)
fspick(0xffffffffffffffff, &(0x7f0000000640)='./file0/file0\x00', 0x0)

07:13:38 executing program 5:
write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
setregid(0x0, 0xee01)

07:13:38 executing program 2:
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)={0x13, 0x65, 0xffff, 0xa, 0x6, '9P2000'}, 0x13)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
write$P9_RLOPEN(r0, &(0x7f0000000080)={0x18, 0xd, 0x1, {{0x0, 0x2, 0x2}, 0x1}}, 0x18)
syz_open_dev$char_usb(0xc, 0xb4, 0x9)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)

07:13:38 executing program 4:
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0)

07:13:38 executing program 0:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x9, 0x80800)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000040))
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000240)={{0x0, 0x2, 0x7f, 0x0, 0x3f, 0x1, 0x3, 0x8, 0x7, 0x99, 0x6, 0x5, 0x7, 0x9, 0x8}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000001240)={0x3, [], 0x40, "22b9c4afd61e01"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002240)={0x8, [], 0x8, "2d90bbddabcf99"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003240))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000003440)={0x6, [], 0x4, "f49520b81f1c2f"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000004440)={0x8, [], 0x7f, "572715c03606e1"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000005440))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000005640))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000005840)={0x4, [], 0xa1, "fa19d3979abf24"})
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000007840)={{0x0, 0x6, 0x8001, 0x1, 0x9, 0x7f, 0x1ff, 0x7, 0x100, 0x0, 0x1, 0x2, 0xdac, 0x1ff, 0x8}})
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000009a40)={{0x0, 0x7ff, 0x2, 0x2, 0x4, 0x5, 0xfffffffffffffff8, 0x8, 0xe42b, 0x27, 0x8, 0xfff, 0x8, 0x4}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000000aa40)={0x1, [], 0x4, "265f3034cad1b9"})

07:13:38 executing program 2:
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)={0x13, 0x65, 0xffff, 0xa, 0x6, '9P2000'}, 0x13)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'})
syz_open_dev$char_usb(0xc, 0xb4, 0x9)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)

07:13:38 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000040)='++{\xf4v\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff)
fspick(0xffffffffffffffff, &(0x7f0000000640)='./file0/file0\x00', 0x0)

07:13:38 executing program 3:
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x1, 'gre0\x00', 0x2}, 0x18)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e20, @local}, {0x2, 0x4e20, @local}, {0x2, 0x4e23, @rand_addr=0x64010100}, 0x4, 0x0, 0x0, 0x0, 0x3f, &(0x7f0000000040)='sit0\x00', 0x0, 0x3, 0x6})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000400)={0x2, [], 0x40, "08b4bae6edcdea"})

07:13:38 executing program 5:
setregid(0x0, 0xee01)

07:13:38 executing program 1:
syz_open_dev$rtc(0x0, 0x60ff, 0x575100)

07:13:38 executing program 0:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x9, 0x80800)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000040))
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000240)={{0x0, 0x2, 0x7f, 0x0, 0x3f, 0x1, 0x3, 0x8, 0x7, 0x99, 0x6, 0x5, 0x7, 0x9, 0x8}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000001240)={0x3, [], 0x40, "22b9c4afd61e01"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002240)={0x8, [], 0x8, "2d90bbddabcf99"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003240))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000003440)={0x6, [], 0x4, "f49520b81f1c2f"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000004440)={0x8, [], 0x7f, "572715c03606e1"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000005440))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000005640))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000005840)={0x4, [], 0xa1, "fa19d3979abf24"})
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000007840)={{0x0, 0x6, 0x8001, 0x1, 0x9, 0x7f, 0x1ff, 0x7, 0x100, 0x0, 0x1, 0x2, 0xdac, 0x1ff, 0x8}})
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000009a40)={{0x0, 0x7ff, 0x2, 0x2, 0x4, 0x5, 0xfffffffffffffff8, 0x8, 0xe42b, 0x27, 0x8, 0xfff, 0x8, 0x4}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000000aa40)={0x1, [], 0x4, "265f3034cad1b9"})

07:13:38 executing program 6:
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000000)='\x00', 0x0, r0)
syz_open_dev$rtc(&(0x7f0000000080), 0xffffffff, 0x200000)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000000c0))

07:13:38 executing program 7:
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'})
fspick(0xffffffffffffffff, &(0x7f0000000640)='./file0/file0\x00', 0x0)

07:13:46 executing program 7:
fspick(0xffffffffffffffff, &(0x7f0000000640)='./file0/file0\x00', 0x0)

07:13:46 executing program 0:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x9, 0x80800)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000040))
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000240)={{0x0, 0x2, 0x7f, 0x0, 0x3f, 0x1, 0x3, 0x8, 0x7, 0x99, 0x6, 0x5, 0x7, 0x9, 0x8}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000001240)={0x3, [], 0x40, "22b9c4afd61e01"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002240)={0x8, [], 0x8, "2d90bbddabcf99"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003240))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000003440)={0x6, [], 0x4, "f49520b81f1c2f"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000004440)={0x8, [], 0x7f, "572715c03606e1"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000005440))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000005640))
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000007840)={{0x0, 0x6, 0x8001, 0x1, 0x9, 0x7f, 0x1ff, 0x7, 0x100, 0x0, 0x1, 0x2, 0xdac, 0x1ff, 0x8}})
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000009a40)={{0x0, 0x7ff, 0x2, 0x2, 0x4, 0x5, 0xfffffffffffffff8, 0x8, 0xe42b, 0x27, 0x8, 0xfff, 0x8, 0x4}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000000aa40)={0x1, [], 0x4, "265f3034cad1b9"})

07:13:46 executing program 2:
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)={0x13, 0x65, 0xffff, 0xa, 0x6, '9P2000'}, 0x13)
syz_open_dev$char_usb(0xc, 0xb4, 0x9)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)

07:13:46 executing program 1:
syz_open_dev$rtc(0x0, 0x60ff, 0x575100)

07:13:46 executing program 6:
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000000)='\x00', 0x0, r0)
syz_open_dev$rtc(&(0x7f0000000080), 0xffffffff, 0x200000)

07:13:46 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000040)='++{\xf4v\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff)
fspick(0xffffffffffffffff, &(0x7f0000000640)='./file0/file0\x00', 0x0)

07:13:46 executing program 3:
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x1, 'gre0\x00', 0x2}, 0x18)
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000400)={0x2, [], 0x40, "08b4bae6edcdea"})

07:13:46 executing program 5:
setregid(0x0, 0xee01)

07:13:46 executing program 1:
syz_open_dev$rtc(0x0, 0x60ff, 0x575100)

07:13:46 executing program 6:
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000000)='\x00', 0x0, r0)
syz_open_dev$rtc(&(0x7f0000000080), 0xffffffff, 0x200000)

07:13:46 executing program 0:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x9, 0x80800)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000040))
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000240)={{0x0, 0x2, 0x7f, 0x0, 0x3f, 0x1, 0x3, 0x8, 0x7, 0x99, 0x6, 0x5, 0x7, 0x9, 0x8}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000001240)={0x3, [], 0x40, "22b9c4afd61e01"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002240)={0x8, [], 0x8, "2d90bbddabcf99"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003240))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000003440)={0x6, [], 0x4, "f49520b81f1c2f"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000004440)={0x8, [], 0x7f, "572715c03606e1"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000005440))
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000007840)={{0x0, 0x6, 0x8001, 0x1, 0x9, 0x7f, 0x1ff, 0x7, 0x100, 0x0, 0x1, 0x2, 0xdac, 0x1ff, 0x8}})
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000009a40)={{0x0, 0x7ff, 0x2, 0x2, 0x4, 0x5, 0xfffffffffffffff8, 0x8, 0xe42b, 0x27, 0x8, 0xfff, 0x8, 0x4}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000000aa40)={0x1, [], 0x4, "265f3034cad1b9"})

07:13:46 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000040)='++{\xf4v\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff)
fspick(0xffffffffffffffff, &(0x7f0000000640)='./file0/file0\x00', 0x0)

07:13:46 executing program 5:
setregid(0x0, 0xee01)

07:13:46 executing program 7:
fspick(0xffffffffffffffff, 0x0, 0x0)

07:13:46 executing program 3:
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000400)={0x2, [], 0x40, "08b4bae6edcdea"})

07:13:46 executing program 2:
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)={0x13, 0x65, 0xffff, 0xa, 0x6, '9P2000'}, 0x13)
syz_open_dev$char_usb(0xc, 0xb4, 0x9)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)

07:13:46 executing program 6:
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000000)='\x00', 0x0, r0)
syz_open_dev$rtc(&(0x7f0000000080), 0xffffffff, 0x200000)

07:13:46 executing program 7:
fspick(0xffffffffffffffff, 0x0, 0x0)

07:13:46 executing program 5:
setregid(0x0, 0xee01)

07:13:55 executing program 7:
fspick(0xffffffffffffffff, 0x0, 0x0)

07:13:55 executing program 6:
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'})
syz_open_dev$rtc(&(0x7f0000000080), 0xffffffff, 0x200000)

07:13:55 executing program 0:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x9, 0x80800)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000040))
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000240)={{0x0, 0x2, 0x7f, 0x0, 0x3f, 0x1, 0x3, 0x8, 0x7, 0x99, 0x6, 0x5, 0x7, 0x9, 0x8}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000001240)={0x3, [], 0x40, "22b9c4afd61e01"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002240)={0x8, [], 0x8, "2d90bbddabcf99"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003240))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000003440)={0x6, [], 0x4, "f49520b81f1c2f"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000004440)={0x8, [], 0x7f, "572715c03606e1"})
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000007840)={{0x0, 0x6, 0x8001, 0x1, 0x9, 0x7f, 0x1ff, 0x7, 0x100, 0x0, 0x1, 0x2, 0xdac, 0x1ff, 0x8}})
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000009a40)={{0x0, 0x7ff, 0x2, 0x2, 0x4, 0x5, 0xfffffffffffffff8, 0x8, 0xe42b, 0x27, 0x8, 0xfff, 0x8, 0x4}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000000aa40)={0x1, [], 0x4, "265f3034cad1b9"})

07:13:55 executing program 1:
syz_open_dev$rtc(&(0x7f00000012c0), 0x0, 0x575100)

07:13:55 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'})
fspick(0xffffffffffffffff, &(0x7f0000000640)='./file0/file0\x00', 0x0)

07:13:55 executing program 3:
r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000400)={0x2, [], 0x40, "08b4bae6edcdea"})

07:13:55 executing program 2:
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)={0x13, 0x65, 0xffff, 0xa, 0x6, '9P2000'}, 0x13)
syz_open_dev$char_usb(0xc, 0xb4, 0x9)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)

07:13:55 executing program 5:
fspick(0xffffffffffffffff, 0x0, 0x0)

07:13:55 executing program 5:
fspick(0xffffffffffffffff, 0x0, 0x0)

07:13:55 executing program 1:
syz_open_dev$rtc(&(0x7f00000012c0), 0x0, 0x0)

07:13:55 executing program 6:
syz_open_dev$rtc(&(0x7f0000000080), 0xffffffff, 0x200000)

07:13:55 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'})
syz_open_dev$char_usb(0xc, 0xb4, 0x9)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)

07:14:02 executing program 0:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x9, 0x80800)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000040))
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000240)={{0x0, 0x2, 0x7f, 0x0, 0x3f, 0x1, 0x3, 0x8, 0x7, 0x99, 0x6, 0x5, 0x7, 0x9, 0x8}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000001240)={0x3, [], 0x40, "22b9c4afd61e01"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002240)={0x8, [], 0x8, "2d90bbddabcf99"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003240))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000003440)={0x6, [], 0x4, "f49520b81f1c2f"})
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000007840)={{0x0, 0x6, 0x8001, 0x1, 0x9, 0x7f, 0x1ff, 0x7, 0x100, 0x0, 0x1, 0x2, 0xdac, 0x1ff, 0x8}})
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000009a40)={{0x0, 0x7ff, 0x2, 0x2, 0x4, 0x5, 0xfffffffffffffff8, 0x8, 0xe42b, 0x27, 0x8, 0xfff, 0x8, 0x4}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000000aa40)={0x1, [], 0x4, "265f3034cad1b9"})

07:14:02 executing program 3:
r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000400)={0x2, [], 0x40, "08b4bae6edcdea"})

07:14:02 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x9)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)

07:14:02 executing program 5:
fspick(0xffffffffffffffff, 0x0, 0x0)

07:14:02 executing program 7:
fspick(0xffffffffffffffff, 0x0, 0x0)

07:14:02 executing program 1:
syz_open_dev$rtc(&(0x7f00000012c0), 0x0, 0x0)

07:14:02 executing program 6:
syz_open_dev$rtc(0x0, 0xffffffff, 0x200000)

07:14:02 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'})
fspick(0xffffffffffffffff, &(0x7f0000000640)='./file0/file0\x00', 0x0)

07:14:02 executing program 1:
syz_open_dev$rtc(&(0x7f00000012c0), 0x0, 0x0)

07:14:02 executing program 6:
syz_open_dev$rtc(0x0, 0xffffffff, 0x200000)

07:14:02 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)

07:14:02 executing program 7:
fspick(0xffffffffffffffff, 0x0, 0x0)

07:14:02 executing program 0:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x9, 0x80800)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000040))
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000240)={{0x0, 0x2, 0x7f, 0x0, 0x3f, 0x1, 0x3, 0x8, 0x7, 0x99, 0x6, 0x5, 0x7, 0x9, 0x8}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000001240)={0x3, [], 0x40, "22b9c4afd61e01"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002240)={0x8, [], 0x8, "2d90bbddabcf99"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003240))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000003440)={0x6, [], 0x4, "f49520b81f1c2f"})
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000007840)={{0x0, 0x6, 0x8001, 0x1, 0x9, 0x7f, 0x1ff, 0x7, 0x100, 0x0, 0x1, 0x2, 0xdac, 0x1ff, 0x8}})
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000009a40)={{0x0, 0x7ff, 0x2, 0x2, 0x4, 0x5, 0xfffffffffffffff8, 0x8, 0xe42b, 0x27, 0x8, 0xfff, 0x8, 0x4}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000000aa40)={0x1, [], 0x4, "265f3034cad1b9"})

07:14:02 executing program 1:
syz_open_dev$rtc(0x0, 0xffffffff, 0x200000)

07:14:02 executing program 3:
r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000400)={0x2, [], 0x40, "08b4bae6edcdea"})

07:14:02 executing program 5:
r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000400)={0x2, [], 0x40, "08b4bae6edcdea"})

07:14:10 executing program 6:
syz_open_dev$rtc(0x0, 0xffffffff, 0x200000)

07:14:10 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0)

07:14:10 executing program 3:
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000400)={0x2, [], 0x40, "08b4bae6edcdea"})

07:14:10 executing program 7:
fspick(0xffffffffffffffff, 0x0, 0x0)

07:14:10 executing program 0:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x9, 0x80800)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000040))
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000240)={{0x0, 0x2, 0x7f, 0x0, 0x3f, 0x1, 0x3, 0x8, 0x7, 0x99, 0x6, 0x5, 0x7, 0x9, 0x8}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000001240)={0x3, [], 0x40, "22b9c4afd61e01"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002240)={0x8, [], 0x8, "2d90bbddabcf99"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003240))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000003440)={0x6, [], 0x4, "f49520b81f1c2f"})
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000007840)={{0x0, 0x6, 0x8001, 0x1, 0x9, 0x7f, 0x1ff, 0x7, 0x100, 0x0, 0x1, 0x2, 0xdac, 0x1ff, 0x8}})
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000009a40)={{0x0, 0x7ff, 0x2, 0x2, 0x4, 0x5, 0xfffffffffffffff8, 0x8, 0xe42b, 0x27, 0x8, 0xfff, 0x8, 0x4}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000000aa40)={0x1, [], 0x4, "265f3034cad1b9"})

07:14:10 executing program 1:
syz_open_dev$rtc(0x0, 0xffffffff, 0x200000)

07:14:10 executing program 5:
r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000400)={0x2, [], 0x40, "08b4bae6edcdea"})

07:14:10 executing program 4:
fspick(0xffffffffffffffff, &(0x7f0000000640)='./file0/file0\x00', 0x0)

07:14:11 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0)

07:14:11 executing program 3:
openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000400)={0x2, [], 0x40, "08b4bae6edcdea"})

07:14:11 executing program 5:
r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000400)={0x2, [], 0x40, "08b4bae6edcdea"})

07:14:11 executing program 4:
fspick(0xffffffffffffffff, &(0x7f0000000640)='./file0/file0\x00', 0x0)

07:14:11 executing program 6:
syz_open_dev$rtc(&(0x7f0000000080), 0x0, 0x200000)

07:14:11 executing program 0:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x9, 0x80800)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000040))
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000240)={{0x0, 0x2, 0x7f, 0x0, 0x3f, 0x1, 0x3, 0x8, 0x7, 0x99, 0x6, 0x5, 0x7, 0x9, 0x8}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000001240)={0x3, [], 0x40, "22b9c4afd61e01"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002240)={0x8, [], 0x8, "2d90bbddabcf99"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003240))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000004440)={0x8, [], 0x7f, "572715c03606e1"})
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000007840)={{0x0, 0x6, 0x8001, 0x1, 0x9, 0x7f, 0x1ff, 0x7, 0x100, 0x0, 0x1, 0x2, 0xdac, 0x1ff, 0x8}})
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000009a40)={{0x0, 0x7ff, 0x2, 0x2, 0x4, 0x5, 0xfffffffffffffff8, 0x8, 0xe42b, 0x27, 0x8, 0xfff, 0x8, 0x4}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000000aa40)={0x1, [], 0x4, "265f3034cad1b9"})

07:14:11 executing program 1:
syz_open_dev$rtc(0x0, 0xffffffff, 0x200000)

07:14:11 executing program 7:
syz_open_dev$rtc(&(0x7f00000012c0), 0x0, 0x0)

07:14:11 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0)

07:14:11 executing program 6:
syz_open_dev$rtc(&(0x7f0000000080), 0x0, 0x200000)

07:14:19 executing program 3:
openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000400)={0x2, [], 0x40, "08b4bae6edcdea"})

07:14:19 executing program 6:
syz_open_dev$rtc(&(0x7f0000000080), 0x0, 0x200000)

07:14:19 executing program 1:
syz_open_dev$rtc(0x0, 0x0, 0x200000)

07:14:19 executing program 7:
syz_open_dev$rtc(&(0x7f00000012c0), 0x0, 0x0)

07:14:19 executing program 5:
openat$rtc(0xffffffffffffff9c, 0x0, 0x8000, 0x0)

07:14:19 executing program 4:
fspick(0xffffffffffffffff, 0x0, 0x0)

07:14:19 executing program 2:
syz_open_dev$rtc(&(0x7f0000000080), 0x0, 0x200000)

07:14:19 executing program 0:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x9, 0x80800)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000040))
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000240)={{0x0, 0x2, 0x7f, 0x0, 0x3f, 0x1, 0x3, 0x8, 0x7, 0x99, 0x6, 0x5, 0x7, 0x9, 0x8}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000001240)={0x3, [], 0x40, "22b9c4afd61e01"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002240)={0x8, [], 0x8, "2d90bbddabcf99"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003240))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000004440)={0x8, [], 0x7f, "572715c03606e1"})
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000007840)={{0x0, 0x6, 0x8001, 0x1, 0x9, 0x7f, 0x1ff, 0x7, 0x100, 0x0, 0x1, 0x2, 0xdac, 0x1ff, 0x8}})
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000009a40)={{0x0, 0x7ff, 0x2, 0x2, 0x4, 0x5, 0xfffffffffffffff8, 0x8, 0xe42b, 0x27, 0x8, 0xfff, 0x8, 0x4}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000000aa40)={0x1, [], 0x4, "265f3034cad1b9"})

07:14:19 executing program 6:
syz_open_dev$rtc(&(0x7f0000000080), 0xffffffff, 0x0)

07:14:19 executing program 1:
syz_open_dev$rtc(0x0, 0x0, 0x0)

07:14:19 executing program 0:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x9, 0x80800)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000040))
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000240)={{0x0, 0x2, 0x7f, 0x0, 0x3f, 0x1, 0x3, 0x8, 0x7, 0x99, 0x6, 0x5, 0x7, 0x9, 0x8}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000001240)={0x3, [], 0x40, "22b9c4afd61e01"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002240)={0x8, [], 0x8, "2d90bbddabcf99"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003240))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000004440)={0x8, [], 0x7f, "572715c03606e1"})
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000007840)={{0x0, 0x6, 0x8001, 0x1, 0x9, 0x7f, 0x1ff, 0x7, 0x100, 0x0, 0x1, 0x2, 0xdac, 0x1ff, 0x8}})
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000009a40)={{0x0, 0x7ff, 0x2, 0x2, 0x4, 0x5, 0xfffffffffffffff8, 0x8, 0xe42b, 0x27, 0x8, 0xfff, 0x8, 0x4}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000000aa40)={0x1, [], 0x4, "265f3034cad1b9"})

07:14:19 executing program 4:
fspick(0xffffffffffffffff, 0x0, 0x0)

07:14:19 executing program 5:
openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)

07:14:19 executing program 3:
openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000400)={0x2, [], 0x40, "08b4bae6edcdea"})

07:14:19 executing program 7:
syz_open_dev$rtc(&(0x7f00000012c0), 0x0, 0x0)

07:14:28 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000000)='\x00', 0x0, r0)
syz_open_dev$rtc(&(0x7f0000000080), 0xffffffff, 0x200000)

07:14:28 executing program 4:
fspick(0xffffffffffffffff, 0x0, 0x0)

07:14:28 executing program 7:
syz_open_dev$rtc(0x0, 0x0, 0x0)

07:14:28 executing program 3:
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0)

07:14:28 executing program 6:
syz_open_dev$rtc(&(0x7f0000000080), 0xffffffff, 0x0)

07:14:28 executing program 0:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x9, 0x80800)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000040))
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000240)={{0x0, 0x2, 0x7f, 0x0, 0x3f, 0x1, 0x3, 0x8, 0x7, 0x99, 0x6, 0x5, 0x7, 0x9, 0x8}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000001240)={0x3, [], 0x40, "22b9c4afd61e01"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002240)={0x8, [], 0x8, "2d90bbddabcf99"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000003440)={0x6, [], 0x4, "f49520b81f1c2f"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000004440)={0x8, [], 0x7f, "572715c03606e1"})
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000007840)={{0x0, 0x6, 0x8001, 0x1, 0x9, 0x7f, 0x1ff, 0x7, 0x100, 0x0, 0x1, 0x2, 0xdac, 0x1ff, 0x8}})
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000009a40)={{0x0, 0x7ff, 0x2, 0x2, 0x4, 0x5, 0xfffffffffffffff8, 0x8, 0xe42b, 0x27, 0x8, 0xfff, 0x8, 0x4}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000000aa40)={0x1, [], 0x4, "265f3034cad1b9"})

07:14:28 executing program 2:
syz_open_dev$rtc(&(0x7f0000000080), 0x0, 0x200000)

07:14:28 executing program 1:
syz_open_dev$rtc(0x0, 0x60ff, 0x575100)

07:14:28 executing program 4:
syz_open_dev$rtc(0x0, 0x60ff, 0x575100)

07:14:28 executing program 1:
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000000)={{0x0, 0x7, 0x6, 0x2, 0x978, 0x0, 0x0, 0x62fc7f23, 0x0, 0x0, 0x92, 0x1, 0xba, 0x0, 0xa4}})
socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000001600)="3f6302e3292e36e1f50ff72e1ca192b7", 0x10)

07:14:28 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000000)='\x00', 0x0, r0)
syz_open_dev$rtc(&(0x7f0000000080), 0xffffffff, 0x200000)

[  256.651326] 
[  256.651549] =====================================
[  256.652053] WARNING: bad unlock balance detected!
[  256.652557] 6.19.0-rc5-next-20260115 #1 Not tainted
[  256.653035] -------------------------------------
[  256.653491] syz-executor.5/280 is trying to release lock (rcu_read_lock) at:
[  256.654186] [<ffffffff81c1dee5>] __wait_on_freeing_inode+0x105/0x350
[  256.654821] but there are no more locks to release!
[  256.655909] 
[  256.655909] other info that might help us debug this:
[  256.657236] 4 locks held by syz-executor.5/280:
[  256.658118]  #0: ffff88800f7e23f8 (sb_writers#3){.+.+}-{0:0}, at: filename_create+0xf7/0x400
[  256.659673]  #1: ffff88801b75b388 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1b1/0x400
[  256.661500]  #2: ffff88800f7e6950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe32/0x12d0
[  256.663606]  #3: ffffffff85c16898 (inode_hash_lock){+.+.}-{3:3}, at: insert_inode_locked+0xf9/0x890
[  256.665266] 
[  256.665266] stack backtrace:
[  256.666101] CPU: 1 UID: 0 PID: 280 Comm: syz-executor.5 Not tainted 6.19.0-rc5-next-20260115 #1 PREEMPT(lazy) 
[  256.666120] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  256.666130] Call Trace:
[  256.666136]  <TASK>
[  256.666141]  dump_stack_lvl+0xca/0x120
[  256.666177]  ? __wait_on_freeing_inode+0x105/0x350
[  256.666196]  print_unlock_imbalance_bug+0x118/0x130
[  256.666215]  ? __wait_on_freeing_inode+0x105/0x350
[  256.666234]  lock_release+0x1ee/0x270
[  256.666253]  __wait_on_freeing_inode+0x10a/0x350
[  256.666271]  ? __pfx___wait_on_freeing_inode+0x10/0x10
[  256.666291]  ? __pfx_var_wake_function+0x10/0x10
[  256.666313]  ? lock_is_held_type+0x9e/0x120
[  256.666329]  insert_inode_locked+0x25f/0x890
[  256.666350]  __ext4_new_inode+0x223d/0x4cd0
[  256.666372]  ? __pfx___ext4_new_inode+0x10/0x10
[  256.666390]  ? __pfx_avc_has_perm+0x10/0x10
[  256.666407]  ? __pfx___dquot_initialize+0x10/0x10
[  256.666440]  ext4_mkdir+0x331/0xb30
[  256.666465]  ? __pfx_ext4_mkdir+0x10/0x10
[  256.666485]  ? security_inode_permission+0x72/0xe0
[  256.666501]  vfs_mkdir+0x6d8/0xc00
[  256.666522]  filename_mkdirat+0x118/0x430
07:14:28 executing program 7:
syz_open_dev$rtc(0x0, 0x0, 0x0)

[  256.666539]  ? __pfx_filename_mkdirat+0x10/0x10
[  256.666555]  ? strncpy_from_user+0x21b/0x2f0
[  256.666577]  __x64_sys_mkdir+0x6e/0xd0
[  256.666593]  do_syscall_64+0xbf/0x420
[  256.666609]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  256.666625] RIP: 0033:0x7f48a0255c27
[  256.666637] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  256.666652] RSP: 002b:00007ffe1bf00488 EFLAGS: 00000206 ORIG_RAX: 0000000000000053
[  256.666666] RAX: ffffffffffffffda RBX: 00007ffe1bf00510 RCX: 00007f48a0255c27
[  256.666676] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 00007ffe1bf00510
[  256.666685] RBP: 00007ffe1bf004ec R08: 0000000000000000 R09: 0000000000000004
[  256.666695] R10: 00007ffe1bf00226 R11: 0000000000000206 R12: 0000000000000032
[  256.666704] R13: 000000000003e9f3 R14: 0000000000000003 R15: 00007ffe1bf00550
[  256.666717]  </TASK>
[  256.686773] ------------[ cut here ]------------
[  256.687306] WARNING: kernel/rcu/tree_plugin.h:443 at __rcu_read_unlock+0x25f/0x5c0, CPU#1: syz-executor.5/280
[  256.688443] Modules linked in:
[  256.688814] CPU: 1 UID: 0 PID: 280 Comm: syz-executor.5 Not tainted 6.19.0-rc5-next-20260115 #1 PREEMPT(lazy) 
[  256.689852] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  256.690726] RIP: 0010:__rcu_read_unlock+0x25f/0x5c0
[  256.691367] Code: f2 02 00 00 c7 43 58 01 00 00 00 bf 09 00 00 00 e8 d6 b7 de ff 4d 85 f6 0f 84 73 fe ff ff e8 38 8a 20 00 fb e9 68 fe ff ff 90 <0f> 0b 90 5b 5d 41 5c 41 5d 41 5e e9 81 4d 74 03 e8 2c 5d 56 00 e9
[  256.693231] RSP: 0018:ffff88801a85f9e0 EFLAGS: 00010286
[  256.693769] RAX: 00000000ffffffff RBX: ffff88801aaf8000 RCX: ffffffff815660f7
[  256.694531] RDX: 0000000000000000 RSI: ffffffff81566100 RDI: ffff88801aaf83fc
[  256.695295] RBP: ffff88801aaf8000 R08: 0000000000000000 R09: fffffbfff0ba7040
[  256.696057] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88801aaf8000
[  256.696763] R13: 0000000000000001 R14: ffffffff85c0c340 R15: ffff88801b52f578
[  256.697520] FS:  0000555556c79400(0000) GS:ffff8880e5442000(0000) knlGS:0000000000000000
[  256.698368] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  256.698950] CR2: 00007ffe1befec48 CR3: 000000001afc5000 CR4: 0000000000350ef0
[  256.699709] Call Trace:
[  256.700074]  <TASK>
[  256.700893]  __wait_on_freeing_inode+0x10f/0x350
[  256.701775]  ? __pfx___wait_on_freeing_inode+0x10/0x10
[  256.703173]  ? __pfx_var_wake_function+0x10/0x10
[  256.704711]  ? lock_is_held_type+0x9e/0x120
[  256.706125]  insert_inode_locked+0x25f/0x890
[  256.708174]  __ext4_new_inode+0x223d/0x4cd0
[  256.711258]  ? __pfx___ext4_new_inode+0x10/0x10
[  256.712431]  ? __pfx_avc_has_perm+0x10/0x10
[  256.713221]  ? __pfx___dquot_initialize+0x10/0x10
[  256.715938]  ext4_mkdir+0x331/0xb30
[  256.718400]  ? __pfx_ext4_mkdir+0x10/0x10
[  256.719176]  ? security_inode_permission+0x72/0xe0
[  256.721212]  vfs_mkdir+0x6d8/0xc00
[  256.722866]  filename_mkdirat+0x118/0x430
[  256.724176]  ? __pfx_filename_mkdirat+0x10/0x10
[  256.725113]  ? strncpy_from_user+0x21b/0x2f0
[  256.727414]  __x64_sys_mkdir+0x6e/0xd0
[  256.728203]  do_syscall_64+0xbf/0x420
[  256.729198]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  256.729817] RIP: 0033:0x7f48a0255c27
[  256.730312] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  256.732147] RSP: 002b:00007ffe1bf00488 EFLAGS: 00000206 ORIG_RAX: 0000000000000053
[  256.732883] RAX: ffffffffffffffda RBX: 00007ffe1bf00510 RCX: 00007f48a0255c27
[  256.733623] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 00007ffe1bf00510
[  256.734363] RBP: 00007ffe1bf004ec R08: 0000000000000000 R09: 0000000000000004
[  256.735100] R10: 00007ffe1bf00226 R11: 0000000000000206 R12: 0000000000000032
[  256.735783] R13: 000000000003e9f3 R14: 0000000000000003 R15: 00007ffe1bf00550
[  256.740886]  </TASK>
[  256.741178] irq event stamp: 274183
[  256.741533] hardirqs last  enabled at (274183): [<ffffffff84d19a7c>] _raw_spin_unlock_irqrestore+0x2c/0x50
[  256.742599] hardirqs last disabled at (274182): [<ffffffff84d197d3>] _raw_spin_lock_irqsave+0x53/0x60
[  256.743630] softirqs last  enabled at (274178): [<ffffffff812cda79>] kernel_fpu_end+0x59/0x70
[  256.744601] softirqs last disabled at (274176): [<ffffffff812ce94b>] kernel_fpu_begin_mask+0x1bb/0x300
[  256.745620] ---[ end trace 0000000000000000 ]---
07:14:28 executing program 2:
syz_open_dev$rtc(&(0x7f0000000080), 0x0, 0x200000)

07:14:36 executing program 7:
syz_open_dev$rtc(0x0, 0x0, 0x0)

07:14:36 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000000)='\x00', 0x0, r0)
syz_open_dev$rtc(&(0x7f0000000080), 0xffffffff, 0x200000)

07:14:36 executing program 0:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x9, 0x80800)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000040))
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000240)={{0x0, 0x2, 0x7f, 0x0, 0x3f, 0x1, 0x3, 0x8, 0x7, 0x99, 0x6, 0x5, 0x7, 0x9, 0x8}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000001240)={0x3, [], 0x40, "22b9c4afd61e01"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002240)={0x8, [], 0x8, "2d90bbddabcf99"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000003440)={0x6, [], 0x4, "f49520b81f1c2f"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000004440)={0x8, [], 0x7f, "572715c03606e1"})
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000007840)={{0x0, 0x6, 0x8001, 0x1, 0x9, 0x7f, 0x1ff, 0x7, 0x100, 0x0, 0x1, 0x2, 0xdac, 0x1ff, 0x8}})
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000009a40)={{0x0, 0x7ff, 0x2, 0x2, 0x4, 0x5, 0xfffffffffffffff8, 0x8, 0xe42b, 0x27, 0x8, 0xfff, 0x8, 0x4}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000000aa40)={0x1, [], 0x4, "265f3034cad1b9"})

07:14:36 executing program 6:
syz_open_dev$rtc(&(0x7f0000000080), 0xffffffff, 0x0)

07:14:36 executing program 1:
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000000)={{0x0, 0x7, 0x6, 0x2, 0x978, 0x0, 0x0, 0x62fc7f23, 0x0, 0x0, 0x92, 0x1, 0xba, 0x0, 0xa4}})
socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000001600)="3f6302e3292e36e1f50ff72e1ca192b7", 0x10)

07:14:36 executing program 3:
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x1, 'gre0\x00', 0x2}, 0x18)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e20, @local}, {0x2, 0x4e20, @local}, {0x2, 0x4e23, @rand_addr=0x64010100}, 0x4, 0x0, 0x0, 0x0, 0x3f, &(0x7f0000000040)='sit0\x00', 0x0, 0x3, 0x6})
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
ioctl$RTC_UIE_OFF(r0, 0x7004)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000400)={0x2, [], 0x40, "08b4bae6edcdea"})

07:14:36 executing program 2:
syz_open_dev$rtc(0x0, 0x0, 0x200000)

07:14:36 executing program 4:
syz_open_dev$rtc(0x0, 0x0, 0x0)

07:14:36 executing program 0:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x9, 0x80800)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000040))
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000240)={{0x0, 0x2, 0x7f, 0x0, 0x3f, 0x1, 0x3, 0x8, 0x7, 0x99, 0x6, 0x5, 0x7, 0x9, 0x8}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000001240)={0x3, [], 0x40, "22b9c4afd61e01"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002240)={0x8, [], 0x8, "2d90bbddabcf99"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000003440)={0x6, [], 0x4, "f49520b81f1c2f"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000004440)={0x8, [], 0x7f, "572715c03606e1"})
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000007840)={{0x0, 0x6, 0x8001, 0x1, 0x9, 0x7f, 0x1ff, 0x7, 0x100, 0x0, 0x1, 0x2, 0xdac, 0x1ff, 0x8}})
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000009a40)={{0x0, 0x7ff, 0x2, 0x2, 0x4, 0x5, 0xfffffffffffffff8, 0x8, 0xe42b, 0x27, 0x8, 0xfff, 0x8, 0x4}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000000aa40)={0x1, [], 0x4, "265f3034cad1b9"})

07:14:36 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'})
syz_open_dev$rtc(&(0x7f0000000080), 0xffffffff, 0x200000)

07:14:36 executing program 3:
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x1, 'gre0\x00', 0x2}, 0x18)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e20, @local}, {0x2, 0x4e20, @local}, {0x2, 0x4e23, @rand_addr=0x64010100}, 0x4, 0x0, 0x0, 0x0, 0x3f, &(0x7f0000000040)='sit0\x00', 0x0, 0x3, 0x6})
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
ioctl$RTC_UIE_OFF(r0, 0x7004)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000400)={0x2, [], 0x40, "08b4bae6edcdea"})

07:14:36 executing program 2:
syz_open_dev$rtc(0x0, 0x0, 0x200000)

07:14:36 executing program 4:
syz_open_dev$rtc(0x0, 0x0, 0x0)

07:14:36 executing program 1:
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000000)={{0x0, 0x7, 0x6, 0x2, 0x978, 0x0, 0x0, 0x62fc7f23, 0x0, 0x0, 0x92, 0x1, 0xba, 0x0, 0xa4}})
socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000001600)="3f6302e3292e36e1f50ff72e1ca192b7", 0x10)

07:14:36 executing program 5:
syz_open_dev$rtc(&(0x7f0000000080), 0xffffffff, 0x200000)

07:14:36 executing program 0:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x9, 0x80800)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000040))
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000240)={{0x0, 0x2, 0x7f, 0x0, 0x3f, 0x1, 0x3, 0x8, 0x7, 0x99, 0x6, 0x5, 0x7, 0x9, 0x8}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000001240)={0x3, [], 0x40, "22b9c4afd61e01"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003240))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000003440)={0x6, [], 0x4, "f49520b81f1c2f"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000004440)={0x8, [], 0x7f, "572715c03606e1"})
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000007840)={{0x0, 0x6, 0x8001, 0x1, 0x9, 0x7f, 0x1ff, 0x7, 0x100, 0x0, 0x1, 0x2, 0xdac, 0x1ff, 0x8}})
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000009a40)={{0x0, 0x7ff, 0x2, 0x2, 0x4, 0x5, 0xfffffffffffffff8, 0x8, 0xe42b, 0x27, 0x8, 0xfff, 0x8, 0x4}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000000aa40)={0x1, [], 0x4, "265f3034cad1b9"})

07:14:36 executing program 3:
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x1, 'gre0\x00', 0x2}, 0x18)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e20, @local}, {0x2, 0x4e20, @local}, {0x2, 0x4e23, @rand_addr=0x64010100}, 0x4, 0x0, 0x0, 0x0, 0x3f, &(0x7f0000000040)='sit0\x00', 0x0, 0x3, 0x6})
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
ioctl$RTC_UIE_OFF(r0, 0x7004)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000400)={0x2, [], 0x40, "08b4bae6edcdea"})

07:14:36 executing program 0:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x9, 0x80800)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000040))
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000240)={{0x0, 0x2, 0x7f, 0x0, 0x3f, 0x1, 0x3, 0x8, 0x7, 0x99, 0x6, 0x5, 0x7, 0x9, 0x8}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000001240)={0x3, [], 0x40, "22b9c4afd61e01"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003240))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000003440)={0x6, [], 0x4, "f49520b81f1c2f"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000004440)={0x8, [], 0x7f, "572715c03606e1"})
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000007840)={{0x0, 0x6, 0x8001, 0x1, 0x9, 0x7f, 0x1ff, 0x7, 0x100, 0x0, 0x1, 0x2, 0xdac, 0x1ff, 0x8}})
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000009a40)={{0x0, 0x7ff, 0x2, 0x2, 0x4, 0x5, 0xfffffffffffffff8, 0x8, 0xe42b, 0x27, 0x8, 0xfff, 0x8, 0x4}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000000aa40)={0x1, [], 0x4, "265f3034cad1b9"})

07:14:36 executing program 4:
syz_open_dev$rtc(0x0, 0x0, 0x0)


VM DIAGNOSIS:
07:14:28  Registers:
info registers vcpu 0
RAX=0000000000000000 RBX=ffffea0000f22ac0 RCX=ffffffff81a57c0b RDX=1ffffd40001e455e
RSI=0000000000000000 RDI=00000000000000f4 RBP=0000000000000001 RSP=ffff88804a15f5e0
R8 =0000000000000000 R9 =fffff940001e4558 R10=0000000000000000 R11=0000000000000000
R12=ffffea0000f22ac0 R13=0000000000000000 R14=ffff88800d8f0a00 R15=ffffea0000f22af0
RIP=ffffffff81757d88 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e5342000 00000000 00000000
LDT=0000 fffffe2f00000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f063cb85000 CR3=000000000ff6d000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ff00000000ff000000000000000000ff XMM01=25252525252525252525252525252525
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=ffffffff829750a0 RDI=ffffffff889c19e0 RBP=ffffffff889c19a0 RSP=ffff88806cf088e0
R8 =0000000000000000 R9 =ffffed1001722046 R10=00000000000fe503 R11=652d7a7973205043
R12=0000000000000823 R13=0000000000000020 R14=fffffbfff113838e R15=dffffc0000000000
RIP=ffffffff829750f5 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000555556c79400 00000000 00000000
GS =0000 ffff8880e5442000 00000000 00000000
LDT=0000 fffffe7c00000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffe1befec48 CR3=000000001afc5000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11
XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000
XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000